It's expected behaviour, somewhat unfortunately. Host groups act as templates of sorts for new hosts, so most attributes (with the exception of Puppet class associations) are copied to the host.

#2436 and other linked issues relate to this. As a workaround, you may want to use the hammer CLI to update hosts individually (you can do a hammer host list --search "hostgroup = foo" too).