This is something I’ve been thinking about for a long time, particularly in the context of critical infrastructure providers such as hospitals. However, I always got stuck on the fact that anyone could return such a status code to deter attackers, which would ultimately render the indicator meaningless.