Thanks for the tip on deleting "friends" - I just started posting the cheaters in the race lobbies, I know I look like a 10 year old snitch, but I consider it a public service announcement.
I was wondering how this happens. They should either get a time penalty as described above, or better yet, just keep actual tune limits on the lobbies. If someone wants to join their friend, then they need town cars at the same level.