It seems like we’re not yet in agreement on whether or not this feature should exist - let alone how it should work - so it’s not pr-friendly quite yet.
@sam Instead of a hidden route, how about a trust-level limitation? We’d include a link to /version on the /about page, but by default the link would only be visible (and the page readable) to TL1 and higher. Keeps it out of reach from the script kiddies, but easily accessible to ordinary users.