I see this a lot too. It makes password spraying very easy. I don't see anything in the article about remediation. Do you have any info for disabling it?