The bug --- or call it misstatement if you like --- is with systemd in
that things can still be started even when they are disabled.
Err. no. Before systemd, the equivalent of mask simply didn't exist and there was no systematic way to disable dynamically started services. So in sysvinit, if a service is D-Bus activated, you had no good way to control that. systemd for the first time harmonized that process.