Role Management Broken??

Ok, so for some reason my moderators on my server can set themselves as an owner. wtf??? how can they give themselves a role that's above theirs??