I never approved WDS
I use WSUS and had it setup to NOT auto approve updates but I DID have it setup to Automatically approve revisions.
But - I had not approved WDS for install previously, yet the new WDS revision still approved itself for install.