what you just described is the behavior of the GUI tools too. and the reason there is a

"replace permission entries on all child objects with entries shows here that apply to child objects"

Remember it is completely legal to have sub folders that contain different permissions than their parent folder, and even if they are inheriting their permissions, they can have "extra" permissions that the parent folder does not have.