Better to regulate voltage by supplying or subtracting base current to BJT pass transistor?
The output transistor is always in the active region regardless of how the pass transistor is driven.

As you say using the subtraction method is away to combine the voltage and current control.

Normally the PSU runs in voltage control but when the current reaches the set limit output drive is diverted for current limiting.