Command Block Minecarts bypassing gamerules

Command Block Minecarts have recently become a serious problem in the bedrock community. Using NBT and/or other exploits players are able to summon command block minecarts in public realms and servers running the dedicated version. This on its own is not the problem, as we have the ability to turn off command blocks, right? Wrong. Command block minecarts still function when command blocks are not enabled. I've seen this exploit used to completely destroy vanilla servers and realms. The command block minecart needs to be either removed, or patched so that turning off command blocks will do what it's supposed to.