> I've made a bunch of SAR's, including pre-GDPR and I've never received one that contained my user settings, so that seems pretty normal.

That is odd because the user has right to get ALL the data they want that is stored about them in the service.