Why does ChanServ set +q/+a AND +o on founders and protected users?
This is merely a feature to allow for backward compatability with old IRC clients that don’t recognise the +q and +a channel modes. This is a historical feature that was necessary when the channel modes were introduced for the first time, but by now it is mostly unnecessary due to greater support for the +q and +a modes by IRC clients. The feature will likely fall away in the not too distant future, and founders/protecteds will only receive the +q/+a mode respectively when they join a channel.