Yep, those restrictions should still be there. I know how they got lost – it was an issue related to re-parenting categories that I thought has since been fixed, but I’ll pay close attention, given your report here: Category security settings reset when changing parent/subcategory relationship.
I’ll get it sorted later today.
Edit: should be all set now