When you look at some asset in the admin UI in rollback mode, and at that rolled back point in time the asset is in a 'pending approval' status, do you see the live version or the edited version?
The whole system is in rollback mode, so because you are logged in, and I assume as a user who has write access to that asset, you will see the edited version.
You could try and login as a different user whilst in rollback mode, so login as someone that only has read access to that asset. But I'm not sure if this will kick you out of rollback mode or not.