This also highlights an ActivityPub issue: If you approve someone's follow request, you're technically not granting that _user_ access, you giving their _instance_ access to your protected posts. And it's then up to that instance to behave in the correct way and only show your protected posts to those users you have actually accepted.
Sure, from a technical standpoint this might be obvious, but it can still be somewhat counterintuitive.