According to the protocol implementation the TLS upgrade is only applied if feature negotiation is enabled as well.
This should be highlighted in the protocol documentation.
Related source: https://github.com/nsqio/nsq/blob/master/nsqd/protocol_v2.go#L392