The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.