I’ve seen some administrators disable software version numbers in HTTP responses, others go further and recompile Apache to identify as Microsoft’s IIS or Nginx to pretend to be Apache [sic].
This is a part of something known as
It gives no protection against directed attacks, but usually mitigate a big chunk of automated threats performed by inexperienced/unmotivated adversaries.
I guess @terraboss’ concern is that script-kiddies would crawl the web and look for a specific Discourse versions with known vulnerability and execute an exploit if version is low enough (unpatched installations).
This was/is the main concern for phpBB installations.
In this context it would be beneficial to add an option to /admin that controls displaying Discourse version (in <meta> and /about).
That being said, we probably want to follow example of Nginx and others and keep it enabled by default (version visible).