It should be removed as an option, but in-application proxy leaks are also common. Application developers are typically not security experts, and built-in proxy implementations are frequently ancient or poorly implemented. Anyone very worried about privacy should be encouraged to use an audited modern alternative that tunnels all traffic from an interface or VM.