Hi Putty 
This does seem to be expected behaviour. If you look at the Trust Level Permissions Reference guide you’ll see a lot of user actions are TL (trust level) dependant including those of category moderators.
Here is the column for category moderators:
