Restrict the masters to add the project members in the project.
Currently, master and admin can able to add the users to the projects with the permission as they want. By this way, the master could add unwanted members to the projects.
If the Admin only can able to add the members in the projects means it will help to overcome this issue Because in my organization all the projects should be created by admin.