Thanks for reporting that! It’s good to know where users are running into problems with the UI. I agree that making a mistake in setting a category’s permissions could cause security issues. A similar, and more serious issue would be to make a mistake in setting the site’s login required setting.
I’m not sure what Discourse could do to confirm that security related settings are correct before they are updated.