BuddyPress.org

That is because the check within groups_post_update allows the site_admin


/* Be sure the user is a member of the group before posting. */
if ( !is_site_admin() && !groups_is_user_member( $user_id, $group_id ) )
return false;