[passfree]

The problem with your approach is that you are assuming that people are fine that scan for in production for security issues. While it is true that everyone does it, this arguments falls flat because there are plenty of systems which will avoid the risk and for good reasons.

[borski]

Nope, in fact you can scan in staging or Dev too, by using Bifrost: https://www.tinfoilsecurity.com/developer/bifrost