Unknown users allowed to login to the switch

Your TACACS+ application may be configured to allow access to unknown users by assigning them the privileges included in a default user profile. See the documentation provided with your TACACS+ server application.