A strange behavior is noticed MySQL is that a user without create privileges can create a Database. This post discusses about the same whether it is a bug or feature.
As a developer of any (web based) application which uses MySQL/MariaDB, you should know that the admin account i.e. 'root' should not be used for every purpose.