Project "Editors" should not be able to modify project "Owner"

We’ve had a problem where users with “editor” rights have been able to modify the ownership of projects that do not belong to them. It seems to me that only an owner (or Admin) should be able to transfer ownership. Am I missing something here?