They insist on adding it to the standard response path, but they're happy for you to remove it:

    header -Server

However as this isn't global configuration it'll tend to pop back up in implicit configs like HTTP redirects and error handling if not overridden.