Even if the option "only managed by founder" is marked on a group, a simple admin (not founder) can delete a user from this group in ACP via : Users & groups - Manage users
You select a username, in options list you choose groups, and you can remove this user.

I wonder if it's normal ?

@+