Ah, sorry for the confusion, check out my message again:

That's just an edge case for the

osqueryi

shell, events are on by default with the daemon:

The first clause is about the shell, the second is about the daemon. Sorry, I'm bad at language. 😕