You make a good point, however a counterpoint: Instance information is not hidden. It would be relatively trivial for a bad actor with resources to DDOS one instance to add other instances.