my point is NOT less security, but functionality first. Have you read what wrote Massimo about the 420 error ? User should get immediately information, that there is no go. Instead is GWIA wrongly trying 96 hours to convince "bad guy" on other end to improve security. There is no one who is listening.
If there is only one, which isn´t playing right, you can make consultancy, but not with 20 or 30 of it.
This isn´t solution, but only workaround.