In master.cf, the following line is commented out;
submission inet n - y - - smtpd
However, the lines following that, specifying syslog, tls security etc, are not, which means those apply incorrectly to the main smtp daemon, instead of just to the submission port daemon.