If you're using the CreateUserWizard, you can set the DisableCreatedUser property to false to force IsApproved
to be initialized to false for new users.
Otherwise, it's a read-write property that you can set manually - so either you have some code that has done this, or something somewhere has updated the database.