Even if the option "only managed by founder" is marked on a group, a simple admin (not founder) can delete a user from this group in ACP via :
Users & groups - Manage usersYou select a username, in options list you choose groups, and you can remove this user.
I wonder if it's normal ?
@+