OK so it is not a bug.
But I think it is a general case that should be fixed globally instead of case by case. Also the fix which duplicate the domain on both field is not modular.
The parent field of account has a domain that restricts to accounts on the same company but this domain is not replicated to the children fields, which allows the client to create children accounts on different companies.