Hi,
Don't overthink it :-) This has to do with some internals of implementation. If you need to apply interface level configs, do them on the parent interface in VPN0, everything else goes onto the sub-interfaces in the service VPN(s).
David
Twitter: @DavidKlebanov