Calendar shared, person able to edit not just view despite settings

I added an event to my calendar from a different email account and added my primary account as a person/invite. My primary account is shared with someone but as view only permissions. They were able to accept the invite sent to MY primary account? Why do they have access to this when they are set as view only?