We are able to remove incorrectly issued badges by going directly into the database.
The problem remains that all users in a course receive enabled badges automatically without them having done anything or even without a teacher issuing them manually.