I always assume that I'm not the smartest person in the room/world. There are 'unknown unknowns' everywhere, and people far smarter than me dedicate their lives to creating more of these unknowns for their own purposes, the purposes of their employers, their governments, etc.

I know this type of data can be misused in a variety of ways. Despite the fact that I can't exactly articulate how it might be misused in this instance, I choose 'default deny' because it reduces attack surface and the amount of unknowns that I have to contend with.

It seems you operate on a 'default allow' rule when it comes to this stuff, and you're welcome to choose that for yourself, but this is a minority position in today's world.