Don't know if this is happening to others or not, but after I upgraded to 6.15, anyone can click on chat and have access, Even if you uncheck this on you plugin admins, it doesn't work. I compared both codes and it seems 6.15 code is a bit different. Here is how you fix the problem if you have it..
If you have 6.15, In root directory, open chat.php
Find this line towards the top:
$logged['member'] = member_auth(0,false );
you need to delete the "false" from (0,false)
Don't know why but with the "false" vistors have access to chat....