User management commands (like createUser) that go through a router (mongos, an embedded router, or the RS endpoint) enforce that provided write concerns have w:1 or w:"majority" which is not enforced by the same commands run against a replica set.