What configures Drupal to send emails on the create or update of an unpublished content?
The culprit turned to be the Antispam module, which is the client for the Akismet anti-spam system.

Its default setting causes an email to be sent to some administrators whenever a module is updated.

What baffled me was why that setting applied only when an unpublished item was created or updated.