@roweryan As you may have already gathered there are now fixes released in the testing branch version 3.8-9.07 that address this “falsely showing enabled” issue on AD and sftp. So the hope is that at least in this regard things should be working more as expected.
Thanks for bringing attention to this issue.