I think project level variables and variable set level variables can be looked at in very different ways. Right now users only edit permissions based on whether a variable is scoped to an environment or not, but in addition to that, I can see a use case for allowing project variables to be edited, but not variable sets or vice versa. Conceptually these variables can be very different, and permissions should be handled independently.