It won’t use any rearms at all unless you actually run sysprep. If you do run sysprep and you don’t want it to rearm, just include Skiprearm set to 1 in your unattend file.
Here’s a bit of my unattend file so you can see where the SkipRearm bit should be:
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:sc....
<settings pass="generalize">
<component name="Microsoft-Windows-Security-SPP" .....
<SkipRearm>1</SkipRearm>
</component>
</settings>
As for not being activated - I found it annoying and activated in the end, since you have something like 3 rearms you can use. But I think it at least affects Windows updates so if you wanted to include those on your image, then activate once if you can.