Almost certainly leftover reference-firmware laziness, not an actual requirement. A lot of cheap WiFi-radio modules ship with a default setup-AP mode meant for initial onboarding via a companion app, and a lot of OEMs never gate it behind a real first-boot-only flag, so it just stays broadcasting forever.
Since you can't disable it or change the MAC, containment beats fixing it: block that MAC at your AP/controller so it can't associate with anything, or isolate it if your AP supports MAC-based assignment. Doesn't stop it broadcasting, but stops it being useful to anything nearby.