If there are other vulnerabilities present, stack traces can be forced to dump all sorts of data like env variables and network information and maybe someone else's personal information.

I strongly urge everyone to hide their stack traces in production. This will reduce your application's attack surface.

>Security by obfuscation is generally not a good option if you can avoid it.

Of course, but obscurity increases security