There is still a failsafe.cf hardcoded inside libpromises/bootstrap.c, which is written to that file.