Wanted to note that I just spent a fair amount of minutes trying to figure out why a mystery moderator was created on a site.
This user had a random hash as email, it looked fairly suspect.
I think it would be good to leave a staff-note, log the “grant moderation” in the staff log, or give some other indication that this user was created by a plugin 