Hi,
I see it like this. The TEST user has only CREATE SESSION privilege. But you might have given him some quota on his default tablespace. SYSTEM user has CREATE ANY TABLE priv. So, as user SYSTEM you are able to create a table in TEST schema. Though SYSTEM has created that table, as it is under TEST schema, TEST is the owner of that and hence he is able to drop it. This is my view.