I own a rust server and I recently found that anyone can ban if they do f1 console And type ban user.
I have searched all over the internet and didnt find anything. My oxide.groups.data is:

Are you using any ban plugins? The only way all players could ban is if you have a plugin allowing them to or all of the players are added as owner or moderator in Rust.