Currently Move Action is too permissive... For example in page app it is possible to move pages under other pages without any check.
These check are done in TemplateTypeRestrictionDropConstraint for pages app.

MoveDialogPresenter uses that constraint, but the predicate that validates possibility of moving item inside the selected one sometimes grants permission before the constraint is used. It assumes that the destination node is root because the getParent() call for JcrNodeAdapter returns null (see MGNLUI-2169).