ACL and EB

I have Joomla and EB set up pretty out-of-the-box in regards ACL. I actually know very little about setting it up in any custom fashion, though I understand how it works, at least at a basic level.

I have a blog set up at https://norcalpulse.com/humboldt/blog which is allowing Registered users to log in and post new blog posts - this surely cannot be correct.

I made a new user group called "Bloggers" under "Registered, which is what I want to use as my guest blogger group and give them only access to the blog as far as creation and editing. Because that group is a child of Registered, they immediately get rights to create even though ACL show every option as Not Allowed.

I cannot figure out why this is acting this way and am now concerned every blog I've set up will be allowing registered users access. As I mentioned, I normally don't touch ACL at all so this appears to be the default setup which is bad.