I know that at least for my user, I have "Registered" as a secondary group. You have given "Registered" "Never" for all Moderator Permissions. The "Never" option works the same as in default XenForo: if a user has a "Never" from any group, they can "Never" have permission for that, even from another group.
This is working as designed.