Thank you @konrad.sopala.
Actually this happens with the demo app from here:
https://auth0.com/docs/quickstart/native/android/03-session-handling
Seems like SecureCredentialsManager deletes local token copy but next log-in attempt succeeds without prompting the user to enter credentials.
Even token revoking via the dashboard doesn’t help.