Messages from banned addresses are always accepted.
Since commit 9c6ab1fd, the NonMemberModeration
rule bails on banned addresses. I don't know why this change was made, but there is no other rule that would catch these addresses, so the message is unconditionally accepted. Which is kinda ironic, for a banned address (it still can't subscribe, but that's pretty useless...)