I talked with Antonio and agreed on this.

Case: a flood attack to know what URIs are registered. If we sent a 404, that means that nobody is there, but sending 200 to all, flooders don't know if it's correct or not.