I have all of the privacy options unchecked including studies but Normandy (which I've just found out about via this issue) is still enabled.

It doesn't, Normandy is still enabled and will install studies against the user's will. This is disgusting.

It seems still enabled in about:config