Information

Full output of /ess version:

Server version: 1.14.4-R0.1-SNAPSHOT git-Paper-233 (MC: 1.14.4)
[18:22:16 INFO]: EssentialsX version: 2.17.1.19
[18:22:16 INFO]: LuckPerms version: 5.0.16
[18:22:16 INFO]: Vault version: 1.7.2-b107
[18:22:16 INFO]: Citizens version: 2.0.25-SNAPSHOT (build 1762)
[18:22:16 INFO]: EssentialsXSpawn version: 2.17.1.19

Server log: https://gist.github.com/JasonHorkles/e50eb887f19e3f064d50e5a0330c0f96

EssentialsX config: https://gist.github.com/JasonHorkles/a047f79785a265b96daf487bbba399ae

Details

Description
If a player creates a sign like disposal or gamemode with &1 in front of it, then it registers it as an actual usable sign allowing them to change gamemodes or whatever the sign may be. They also can't break the sign as they don't have the permission (nor do they have the permission to make the sign, just to use it)

Steps to reproduce
As a default user make a sign like [Disposal] or [Gamemode] and put &1 in front of it (like &1[gamemode])
Use the sign
Try to break the sign

Expected behavior
It shouldn't do anything as they never had the permission to make the sign in the first place.

Screenshots
All made by a default user

Players didn't have the sign colors permission with essentials so another plugin must've been handling colors