In one of the workflow steps (e.g. status Open) the workflow step property key "jira.permission.create" has been set to the value "denied".

However, when you browse to an issue which has been set to this status, then it is still possible to create a sub-task by accessing more actions->create sub-task.