Cannot be disabled unless there is a token
Based on feedback provided on Czech blog for new Turris OS 5.3, I was able to reproduce the behavior.
The HaaS token is required to be filled in, otherwise you can not disable it. With this, there is related one more issue that you can not remove the token and save it. Running HaaS without token does not make sense, but the correct behavior should be that if there is no token, it will be disabled. Maybe, it sounds complicated, but still HaaS should be disabled even without token.
Thanks belongs to Lukas for reporting it.