> Am I understanding that this is doing something the chipset wasn’t designed to do?

Every WiFi modem has a testmode. It's required to verify the TX/RX chain during manufacturing and for compliance testing.

Seemingly you can read out the entire spectrum at full rate.