While you can select draft posts in the admin they should not appear on the front end, usually, it can happen if you return post IDs.
ACF has a filter that can be used to modify the values that can be selected in the admin, acf/fields/relationship/query
