Data security behavior

Could someone tell me what should be the expected behavior for below data security settings

Object: Expense
OWD=Public Read Only; Grant Access Using Hierarchy=No
Permission sets=None
Sharing Rules=None
TOM Profile CRED=Yes; VA=No, MA=No
JOHN profile CRED=Yes; VA=No, MA=No

TOM is Senior to JOHN. Can TOM delete JOHN's records?