All Non-Admin users can see all users and groups in the system. From the list of users a Non-Admin user can see the last time another user has logged in and also when that user has performed any kind of changes in their account. This seems to me like a bug, as it’s information that should only be visible by the admins.