Hi,
Thanks for the bug report. I agree the security tab in feature settings and page settings should only be shown for admins, content admins, and site editors (site editors is only applicable in a multi site installation that uses related sites mode).
This is now fixed in the source code repository so it will be fixed in the next release.
Best,
Joe