Well .. they aren't supposed to but apparently that is the issue. Now I need to go revoke rights ...
Let me ask this question: what are you / your client trying to accomplish here? If you don't want to use workflow, disable it. If you do want to use it, you should control the flow with it.
If you want to eat your cake and have it too, then you can try to move some of those fields to the Details panel and see if that resolves the issue.