The description of the POST method is very generic; one of its functions detailed in the HTTP spec is:
- Providing a block of data, such as the result of submitting a
form, to a data-handling process;
Which fits with much more than mere CRUD. And it's specifically written that it doesn't have to result in the creation of a new URI-addressable resource.
(Also, REST isn't HTTP, you can comply with the former even if you're violating the latter, and vice-versa)