Any user is a member of the public role in the database. The public role is granted access to many of the system tables.But You might want to be careful in revoking access to the public role as this can break lot of stuff. Below is an excellent article from Brian Kelly.