In 2.9.3 I am only seeing this behaviour with SDE feature classes, and hosted feature classes.
FGDB and mobile geodatabase seem to honor the definition query.
Not sure about 2.9.4, I went back to 2.9.3 as .4 on has broken the ability to "identify" more than one hosted feature with an attachment without errors.
R_