Why users removed from a group still have their privileges?

The few files I’ve looked at so far have conditionals testing for “locked”.
When you look at a members Admin page, is the TL3 locked?