Are you saying that if you disable NTLM, this hole is closed? I.e. when Explorer processes an icon file with a URL, it will not pass an NTLM hash to a remote server?

What is "disable NTLM", exactly: what does/doesn't happen?

Does it mean that NTLM hashes don't exist any more and therefore can't be sent anywhere?