The system activity history will show that the master user connected with the account armed or disarmed the SEM-DSC PowerSeries or SEM-Honeywell/ADEMCO Vista security panel when it was really another user who used the Customer app or Customer website.
This is typical behaviour because of how the System Enhancement Module (SEM) connects with those panels, so there is no need to be alarmed.