Could not believe my eyes!

Let me first say that I like Drupal very much and it is currently definately my choice of CMS!

I am relatively new to Drupal and I just found out that unpublished nodes are visible in the menu for non editors or admins!
Opening the page will then lead to an 'access denied' message which is of course correct. However, the menu items should not be visible for non editors in the first place!
First, I thought I must have made a mistake somewhere because this behaviour is not to be expected from a CMS!
After trying for a while I just could not figure what I did wrong, so I did some searches on drupal.org:

The results:
This HUGE bug was already reported in 4.6!

Here are the results:
http://drupal.org/node/54525
http://drupal.org/node/55923 (stated that it is fixed in 4.6 HEAD)
http://drupal.org/node/45988 (actually another problem but mentioning this problem as well)
http://drupal.org/node/68979
http://drupal.org/node/129225 (feature request!!!! not even a bug report for Drupal 6)
http://drupal.org/node/130440
..... (stopped searching)

Here is another thing:
There is a content type which has default published unchecked and create automatic revisions.
A non admin editor creates a node that will of course not be published.
The admin publishes the node.

Now the editor decides that he wants to make some changes to the published node.
Expected behaviour would be:
Changes made by the editor would generate a new revision that is unplished.

But this is what happens:
The revision is not created at all!
The changes made by the editor will be published right away.

Having said all that, I got the impression that Drupal is made for a single person admin. Workflow and collaborative editing is poorly designed and implemented.

I hope that this will be redesigned in the Drupal 6 distrubution.