Unauthorised screen sharing

We had a participant on a meeting share what looked like it may have been a whiteboard.

Screen sharing was only enabled for cohosts and the hosts had not opened any whiteboards.

Does anyone have experience of bombers being able to do this?