You will have to consider that this only works for creating items at the moment. When a user edits items, which would need approval, there’s no workflow notification and edits get published instantly even if “needs approval” is on. See here: Customer submitted content: No workflow notification triggered when items are edited