It's normally active for local users as well. It is for me and I never logged in. You're (accidentally?) running with an unusual config for some reason. The way to turn it off also changed a couple of times already, so you're really lucky you've avoided it.