Yes, they can be removed as an authorized user at any time. Also, it's not like co-signing.