This is exactly right, but in my opinion usually not important. If Joe Public, or a competitor, or whoever knows how many posts you have, users you have, administrators you have, etc how much does that actually affect your operation? I guess they can better compete against you in some small way with that information, but in my opinion it's almost never worth the effort to obfuscate. It's like optimizing for a problem you don't have.
Re:Database IDs Have No Place in URIs (2008)
by geezerjay on Saturday May 11, 2019 @04:06AM
(#19885146)
> how much does that actually affect your operation?
If it's a business service then the operation is not the end goal but the means to the end.
If it's a business service then the question you should be asking is "should I care that my competitors are able to observe and monitor my service metrics?".
Quite often, businesses do care a lot.
https://en.m.wikipedia.org/wiki/German_tank_problem