Why kcp/NAT is operating even it has been disabled in settings?

The bit unintuitive trick is to go to Advanced Settings and set:

Stun Keepalive Seconds = 0