Why kcp/NAT is operating even it has been disabled in settings?

Agreed, see https://github.com/syncthing/syncthing/issues/4518 and resolved external address?? (new in .v0.14.40).