Web Content Control still being enforced even after disabling it in the profile

Hello everyone.

So we have disabled web content control completely (and all other browsing protection controls are also disabled).

However, in the security events I am still seeing that browsing protection is still active. Here is a sample log:

I verified with the user that indeed they are unable to access some sites. The profile and on the endpoint is up to date.

What could be the issue?