I see what you're saying but I disagree that it's subjective. I'm saying that the benefit for the user is lower than the loss in security (to the user) with th

I see what you're saying but I disagree that it's subjective. I'm saying that the benefit for the user is lower than the loss in security (to the user) with this approach. You're saying that the benefit to the site owner is greater in this case, and I'm not sure whether it is or not (but if it's a deliberate policy I'm sure PoF would). What is a benefit to one side is not necessarily a benefit to another.