Why does detailed 404 security setting not explain why I can't access subcategory?

The alternative is to acknowledge that a post or category exists, potentially leaking information.