I struggled with PM rights TL0 vs. TL1 when a staged user (because of email support) created account and couldn’t read PMs. I solved this bypassing TL0 and starting with TL1 right away — I don’t have spam issues or controversial topics so I could do it.
So AFAIK that isn’t a bug, but by design. And yet situation of OP can be such one somehow.