In JetBrains YouTrack prior to 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
jetbrains youtrack