Ah! Good to know. I didn’t see any reference to that on their product page so assumed it was still on by default

It's carved out as a specific permission on the privacy page now - https://www.strava.com/settings/privacy - and also explicitly mentioned as turned off for "only you" activities, but no mention if it's exposed if your activity is "followers only".