Alvin,
There are couple of ways the system could be auto arming. As you mentioned, one is via a rule. The other is via the auto arming option located in the area settings. There is a toggle to enable or disable this option.
You can confirm it is a scheduled arming by referencing the history log, which would indicate that the arming was via a scheduled event.
Thanks,
Mike