I noticed this while prototyping a feature for our product. We are required to offer silent uninstall and silent disable facility in our product i.e. perform these actions without user confirmation. Apps can be disabled successfully from the App Manager CSP however, if the user goes to the Play Store page for the disabled app, there is an option to enable the app. This allows the user to override the App Manager CSP and enable the target app. This is unexpected behavior, ideally the App Manager CSP's settings should override any Android APIs for enabling/disabling apps.
The Play Store functionality described above is documented by Google - Reinstall and re-enable apps - Android - Google Play Help