The security issue lies in that banner content was being made available to everyone, and not just admins/mods. I don’t agree with your assumption that admins are aware that all read-restricted banners would be made public.
However, I do see the use case and the desire to not muddy public categories 