If you run a minecraft server why can't the owner be hit?

Your friend has administrative privileges on that server. He is able to basically cheat in the game by issuing commands to the server. He also has the ability to spawn monsters, materials, etc.