Enabling Notification preferences allows to override BPM InApp notifications

Summary:

BPM Administration have Notifications set as "In-App".

But, Enabled the notification preferences under User Categories under Security Console.

Welcome Emails were triggered to all the employees loaded.

Content (required):

Worker dat was used to load the Worker file including email addresses as well.

We turned off the BPM Administration Email notifications and set it to In-App notifications.

But enabled the notification preferences under User Categories under Security Console.

Which in turn triggered the welcome email to all the users.

Want to understand the behavior here.

Does Security Console settings for notifications override BPM Administrator settings?

Version (include the version you are using, if applicable):