Are you sure? If you take a look at the random story code it only grabs published stories.
as you can see from the SQL query that it's only going to pull published stories from the database and then randomize those published stories. Maybe there is a bug with this but I'm not sure.
$cols = $db->get_col('select link_id from ' . table_links . ' where `link_status` = "published" order by link_id desc limit 200;');
$randstory = rand(1, count($cols));
$randstoryurl = getmyurl("story", $randstory);