GitLab Advanced SAST "not enabled" but is, or maybe not?

Per the documentation for configuring the advanced SAST tooling:

include:
  - template: Jobs/SAST.gitlab-ci.yml

variables:
  GITLAB_ADVANCED_SAST_ENABLED: 'true'

this doesn’t actually update the project “Security configuration” state:

Am I missing something?