Does this mean that Cloudfront does not actually require (correct) SNI? Example: Sending HTTP request for signal.org over TLS to Cloudfront IP address with SNI

Does this mean that Cloudfront does not actually require (correct) SNI? Example: Sending HTTP request for signal.org over TLS to Cloudfront IP address with SNI as "allergan.com" returns signal.org web page, not allergan.com web page.