Btw, it did bypass the viewModerated permission on all profiles. User ID of the profile being viewed was returned, so messages were fetched from the profile owner's perspective. I only noticed this recently when unapproved status updates on an Admin account didn't go away even after I logged out.
Yeah, I just meant that if I wrote on your profile and it wasn't approved, guests couldn't see it. Though if I wrote on my own profile (status update), then people could indeed see it while it wasn't approved.