When we were uploading badges for our game, a senior dev on our project realized he could use group funds to create the badge, despite not having the spend community funds permission. Video linked below:
Expected behavior
The senior dev should not even be presented the option to use community funds to upload the badges.