@realact – Sorry for the delays. v2.6.0 should clear that up, once WordFence updates it to cleared as well.
IMHO Ultra Low level at best, but they don’t ask us. Your site can’t be hacked, nothing can be changed etc.
Took longer than expected to come up with a simple & elegant solution that didn’t break anything else along the way.
Ultimately you had to have already chosen to expose your protected content in archives with a “Restricted Content” style notice in place of its content for this to have had any impact. You can read about it here: https://contentcontrolplugin.com/docs/security/preventing-bots-from-discovering-restricted-content/#how-content-can-be-exposed