Write informational proposal summarizing conclusions of #296

Our discussions on #296 (closed) concluded that mostly we don't need to do anything; we should summarize this somewhere so that we remember that these version-fingerprinting attacks are out-of-scope.

(I'm not sure this needs to be a proposal but I'm not sure where else to put it.)