I am aware of it. But we have these status codes for a reason and the app should be secure enough for it not to matter.
Security by obscurity has it’s place but should not be the default.
Also: hackers do not really care about what you provide them. They are every well aware of appa faking it. Source: I work with security specialists (hackers)
