Because lot of spam registration I have checked ""Mandatory user approve".
so I expect unless admin approve the user, he/she should not be able to post any content.

But in my case spammers can add content, currently I they are adding blogs.
Is it a bug?

These content is not appearing in newsfeed, but appearing in the blogs section.