There currently is a problem with the new Protection UI, which disabled the precautionary move-protection that was installed on HEAD.

Currently, new pages are created with an empty protection string. To fix it, all the pages that have that empty string have to be changed to [move=autoconfirmed] through a conversion script. [move=autoconfirmed] also needs to be the default string when creating a new page.

Pages with a non-empty protection string should be working properly.

Titoxd