Does that mean it applies to the end users of the NodeBB forums?
When a user has read privilege on a category but not on the topics within the category, the teaser still shows.
Is that intentional?
I think teaser shouldn't show up if you don't have topics:read privilege. Although it is a bit tricky since the teasers also show up on the category listing. If you don't have topics:read privilege all of those teasers will have to be empty.
I agree, that doesn't sound right.