This is a security mis-step on GHL's part where it makes it too easy to unintentionally give new users admin rights. The default new user role should be
User
, NOT Admin. It should be opt-in to give users admin rights.