Comment by b112

Only someone poking about would ever hit that url on someone else's domain, so where's the downside?

And "a lot" of false positives?? Recall, robots.txt is set to ignore this, so only malicious web scanners will hit it.