I had turned it off on my account as well, which is what made seeing two years of search history from myself so surprising. I assume when my account was +'d, this setting was accidentally missed.

Moral of the story, just take a quick look anyways.

Me too, but we know Google (like facebook, etc) probably logs all of your IP activity... that's how ad targeting works