Caddy might just be the perfect example of software "engineers" and SREs getting not just dumber but dangerously incompetent.

"Makes your site more secure!!!"
Okay so how do I restrict an endpoint based on IP or user-agent?
"Oh, you just <vague gesturing>."
That's not an answer. And your documentation looks like it was vibe coded and is half wrong.
"You're just too dumb!!"
And that's why it takes me 5 seconds to do it in nginx, which you complain is 'too hard' to use and administer.