Indeed, but remember that can also be a sacrificial defensive strategy rather than a "scientific" data collection exercise (which as you say would be biased by

Indeed, but remember that can also be a sacrificial defensive strategy rather than a "scientific" data collection exercise (which as you say would be biased by a Heisenberg/observability effect). Some honeynets are put up there to simply sink the resources of, and discombobulate attackers. Meanwhile, buried deep in there behind a couple of layers of port knocking, is the real asset.