Why does SPF “neutral” still show as pass sometimes?

The ?all neutral mechanism is a weak signal that most modern receivers treat as no different from none. It is not recommended and often seen as a misconfiguration. You should always use \~all softfail or \-all hardfail.