The ASP.Net team has been somewhat hard headed about this for quite a while. They just didn’t seem to grasp how this could be a problem. Glad they have finally come around.
Here’s a link to the relevant comment:
https://github.com/dotnet/aspnetcore/issues/42158#issuecomme...