This relates to Multicenter specifically. Org records and donations made to orgs are shared across centers and cannot be locked down.  This should be updated so that visibility of org records is center specific, just like constituents are, and not shared with other centers. Currently center admins can view (including donation information), edit, and delete org records across the entire instance and there should be an option to restrict this.