Just a guess but maybe it’s because of mwan3 failover / high-availability. Maybe the system wants to terminate all active sessions when switching to another default route.