Is there an exception where users can access records despite restrictions from the sharing rules?

Yes, but the exception is only for Admin users. They have full access to all the records.