when not logged in, a contribution should not allow contact name and address changes

When an anonymous user (not logged in) donates to the site, they should never be able to update any existing contact data. And, when the drupal user account is required, a successful transaction should create a user account based on name and email. Neither rule is working for my test site that has these setting:
Include reCAPTCHA? - YES
Drupal user account registration option?
No account create option
Give option, but not required
Account creation required - YES
What to do upon duplicate match
Issue warning and do not save - YES
Update the matching contact
Allow duplicate contact to be created
Proximity Search
None
Optional Required
Enable mapping for this profile?
Include profile edit links in search results?
Include Drupal user account information links in search results? - YES