Default forward

I set up a hotspot and turned off default forward, I am still able to scan the network with a simple android app called network discovery and I can see every wireless device connected and scan the open ports and even connect through ssh. This is routeros 5.13.
I thought the idea behind this is so users can’t see other users. Is it a broke feature?

Any ideas?

Do you use Access-list for your stations ?

If yes, check forwarding over there