@codefolio@risottobias Scripted attacks, coming from compromised servers, growing botnets, etc: "I will scan random IPs and try these canned common explouts". Like a typical user, they'll neither care nor notice that you've removed server headers.
Actual human attacker, targeting your server: Doing recon, will absolutely do basic recon like checking headers, portscanning, etc, etc. Removing headers will slow them down, force them to try attacks that won't work, greater chance of triggering your IDS or creating weird messages in your logs, etc.