I agree with you that CSP headers can sometimes contain sensitive information or reveal details about the application's security setup. By sharing a screenshot, this information may inadvertently become visible to others. but as you see it is just an example, if i am wrong , i am open to discuss even though i edit the articles until we discuss this if you want :-)