(It's most likely a bug in the Public API but I found it through the REST API)

It's possible with the REST API to create a content under a Location even if the content type is configured to not be a container.