It’s easy to imagine how this might often be the case: if the “inessential” public-facing Web pages are hosted on the same systems you’ve got to keep up and run

It’s easy to imagine how this might often be the case: if the “inessential” public-facing Web pages are hosted on the same systems you’ve got to keep up and running for other “essential” back-end purposes [...] Does this not then constitute an information leak about what seemingly "inessential" public-facing sites are housing "essential" services (that perhaps should not be on public-facing hosts)?