The issue is that you’ve restricted who can post in the category.
ActivityPub users do not have more permissions than regular users.