I believe that’s expected behaviour; tokens oov for another model can still be learned/given weights by the countVectorsFeaturizer: spaCy and OOV-Tokens
The high confidence is probably due to specific tokens being strongly associated with specific intents.