Steps to duplicate:
1. Student submits a (Points) Assignment
2. Instructor enters the Points for the Grade and clicks "Save"
3. Student can now see the points score even though the score had not been returned/released.
Instructor comments are not display but the score is.
I duplicated this behavior on our site and on http://qa3-us.sakaiproject.org:8086/portal