Actually, I did forget that CB 1.2 RC 2 has its own parameter also for this:
In CB configuration, User Profile tab, "Allow user to edit his CMS parameters in frontend".
That one is ON by default, and overrides Joomla's one.
I'm adding a visible warning to CB configuration if that param mismatches joomla's setting.
So this is not a bug.