Because "systemctl is-active" works by querying the systemd system manager to determine the current state of the specified unit. This command "systemctl enable --now sshd.socket" will stop the /usr/sbin/sshd service but use socket instead (one socket per client request).