Why is the disconnect option of Windows Connect Tunnel running in "Always On VPN" mode grayed out?

Although the disconnect option of Windows Connect Tunnel (CT) running in "Always On VPN" mode is grayed out, tech savvy users can terminate the tunnel connection in non-standard ways. In those cases, CT won't auto reestablish the session. However, upon a new Windows session, CT auto reestablishes the VPN session. This is by design, in the 12.2 release. This feature is being considered for enhancement in the next software release 12.3.0 (RFE 202707).