Security fault on MainWP

I installed MainWP few days ago and yesterday found this security fault that expose all my sites:
If any one create an user and make login on the Main site, even if you limit new users as a ‘subscribers’, they will have access to ALL SITES Dashboard if you leave the main site dashboard open to them.
I’m using two different roles plugin to protect areas I don’t want subscribers to go, but neither one protects MainWP
I just removed everything and I would say everyone should to the same until this issue is settle.
It’s very easy to a newbie get control over all your sites that you control with this plugin.
Looking for solution for this issue.

https://www.ads-software.com/plugins/mainwp/

[ No bumping please. ]