One gotcha to keep in mind is that some plugins still run some code even when they are disabled. I don’t know if this is the case for these three, but if you’re trying to determine if a given plugin is the culprit, your best bet is to remove it completely from the app.yml file and test.
You could do the same with the theme components, but as you note, they don’t seem to interact with logins.