BuddyPress.org

I don’t think what you describe with the pending comments notification is a bug. As you say, if a user has a certain level of permission on a blog, then they might have enough permission to moderate comments. I figure you can test this easily by bumping one of those users down to a subscriber or a contributor role and see if it goes away for them.