Why does this work? Shouldn't the client be forced to use IPsec? Logs in just fine and uses MPPE stateless 128.

Fresh install of Windows 10, and the built-in client logs in using its automatic detection of VPN server types. ALL WITHOUT ENTERING THE IPsec secret PSK