Even the best auditors I've seen have crappy software that will flag the Apache Version String even if they're also running on the machine and can identify that

Even the best auditors I've seen have crappy software that will flag the Apache Version String even if they're also running on the machine and can identify that it's actually an up-to-date .deb running.