Since bug 557087, an element can be disabled whithout having a disabled attribute because a disabled fieldset will make all its elements disabled.
A simple testcase: both input elements should appear disabled. Currently, I guess that only the second one will.
I might as well take this one along with the 'required' state bug.
Just a reminder, without this bug fix, some disabled elements will appear as enabled to users with AT.