Why can my subscribers create new posts for review?

My subscribers seem to have permission to create posts. After reading the documentation on capabilities, this shouldn't be the case. Subscribers should only be able to manage their own profile.

I have tested this with all plugins disabled and using the default 2022 theme, and new users are still able to create posts.

How do I troubleshoot this, since it doesn't seem to be a theme or plugin issue? Is this a bug in the latest release, perhaps?