When wifi is on it will look for an AP just like everything else does, and when it is off it does not broadcast at all. How difficult is this for you to understand? If you are talking about the control center 'disconnect from current wifi' option, well, get over it. Being unassociated with an AP is NOT the same as being turned off, and it never has been.
The point is, when I want to turn Wifi off, and use the common UI to do so, it should be off - and not just "in a state where it won't associate with AP's" .. this is Apple treating their users like idiots and putting us all at risk as a result of it - and, you have to ask why they do this? The reason is so that they can still harvest data while you're not associated with the AP - covertly, even - so that their location accessory 'feature' gets more data points..
From Apple directly:
"For the best experience on your iOS device, try to keep Wi-Fi and Bluetooth turned on."
The reason is because Apple are using WiFi for purposes other than those of the average user - data harvesting.
WTF is 'common UI' even supposed to mean in this context? Apple is not treating their users like idiots, they are doing what the users usually want when they flip wireless settings via the control center. This may differ than what you expect, but I am sure you will eventually get over it. The number of people who used the control center to flip wifi/bluetooth for privacy purposes is so vanishingly small as to be a null set, especially when compared to the number of people who simply use the toggle to disconnect from a mediocre wifi connection so that they can use cellular data instead.
Yes. Changing privacy and security-implication behavior around without good cause for edge-case "usability" is silly.
What happens, if say, a Syrian is killed by their government because they were able to use their gossiping device to locate them? All that iOS 11 privacy work becomes moot if there's a SIGINT fail.