announcing security measures is generally seen as a security risk in itself.

And while that’s true, it does provide very annoying and convenient cover for untrustworthy sources.