The toolbar shows count for tickets with unread articles (a ticket is counted only once, regardless of how many unread articles it has).

It seems there's a config, Ticket::NewArticleIgnoreSystemSender, that controls if a ticket should be marked as read when it has unread system articles. I'll try enabling this config and see if that works.