Named access levels are specific access levels. Every user also has a general access level, which is a number. Since your * trigger is not explicitly matching a specific named level, the match succeeds against the general access level, and $ulevel returns that general access level. While this may not be the behavior you expect, it is not a bug.
