Its default behaviour on Debian Stretch is to reset the MAC address to the permanent one, and we did not make up our mind yet wrt. replacing our custom MAC spoofing system with NM's own one (refs: #11293).
