I'm pretty sure that would only show moderated profile posts (status updates) on the user's own profile, so it's not every profile post, but fixed nonetheless. Thanks.
Btw, it did bypass the viewModerated permission on all profiles. User ID of the profile being viewed was returned, so messages were fetched from the profile owner's perspective. I only noticed this recently when unapproved status updates on an Admin account didn't go away even after I logged out.
Yeah, I just meant that if I wrote on your profile and it wasn't approved, guests couldn't see it. Though if I wrote on my own profile (status update), then people could indeed see it while it wasn't approved.