The "If you move a subfolder in a folder that is allowed to collaborate externally to a folder that is not allowed to collaborate externally, the subfolder will still be able to collaborate externally." behavior is a specification of Box.

The above specification violates Box's waterfall permissions specification. When this happens, Box should alert and remove external collaborations.