This has been the case for a long time with prior versions..
The permission just counts raw initial post counts moderated or not, deleted or not and increments the post count for the user
So it works just like you found.
If you have set the first 5 posts moderated after that not..
Then all the user needs to do is post 6 posts where the sixth post shows.
Even if 5 of the posts were deleted by moderators.
The only feature that resets the member post counts is in the rebuilder area of the cp.(Rebuild Post Counts)

Which becomes another issue.
When you finally run the rebuilders long time members complain when they had like 5000 posts and now show only 3000( as a example).Due to deleted posts over time.

It really should be part of the cache system that runs it on a regular basis.
So members don't notice it so much.

It probably is not considered a bug per say but a design flaw or enhancement since it has been there since the 7.x series started.
I can only recall from memory one member posted a issue with this design.in the past several years.

Last edited by Ruben; 08/11/2018 4:08 PM. Reason: Added Comment.

Blue Man Group
There is no such thing as stupid questions. Just stupid answers