Wildly its an Ecobee and they added the feature on purpose some years back.

Apparently a firewall rule is about the only way to stop this.