Why Notes and attachment-related list showing Edit and Delete button when I have read-only access?

Hi,

To delete a note or attachment, you must be the owner of the note or attachment or an administrator with the “Modify all Data” permission. Note ownership is determined by the owner field. Attachment ownership is determined by the created by field. Record owners (except Portal users) can delete attachments on records. Notes and attachments marked as private via the Private checkbox are accessible only to the person who attached them and administrators. For administrators to view private notes and attachments, they need the “View All Data” permission; to edit or delete them, they need the “Modify All Data” permission.