Synergy, the app that allows a computer to share its mouse and keyboard over the network to other computers, did a more aggressive move a few years ago. It's still technically GPL because you can compile it yourself, but they charge $20 for a binary license and to enable certain features.

I have similar concerns. I practice good security but I also enjoy security through obscurity. I prefer to prevent my users from knowing what web server is serving their content. Now unless I start compiling from scratch, everyone will know I use Caddy and I don't like that.

Alternative is to run Caddy behind HAProxy or Nginx or something similar that can strip those headers out.

I think it's time to just rebuild and use Nginx again and try to get QUIC and automatic LetsEncrypt working.