Good point. Yes, "--bootstrap-preinstall-command systemctl stop chef-client" would do the trick (and I'll be using this, going forward, so thanks for the tip!).
I wasn't sure if this would qualify as a bug or a feature request, because it's a very narrow edge case, but definitely has undesired consequences.