That’s not what the rewrite argument of register_post_type means. If you set it to false, that doesn’t mean “prevent any rewriting of this post type’s URL, ever.” That wouldn’t even be possible.
It simply means not to use pretty permalinks when the post is created. You can still add rewrite rules for that post type later.