This was the case before bce0c5fd74 ("child-create: Update CHILD_SA IP addresses before installation") and allows listeners to consider the traffic selectors of the SA that's about to get installed.
bce0c5fd74