This does pop up from time to time, especially in the context of security.
I think the first improvement we will make in the next 12 month is at least some sort of guarantee that parent permissions are always less strict or equal to child.
The report problem is interesting, not against improving this with a “include subcategories” for reporting purposes.
Inheriting suppress is not something I am too interested in adding as the workaround is very very easy.