L2TP/IPSEC - Windows 10 client logs in without IPsec secret - works just fine

Why does this work? Shouldn’t the client be forced to use IPsec? Logs in just fine and uses MPPE stateless 128.

Fresh install of Windows 10, and the built-in client logs in using its automatic detection of VPN server types. ALL WITHOUT ENTERING THE IPsec secret PSK