I agree that catching it on server level (IIS Rewrite), however the Middleware option is the only cross platform available thingie.

It is, but just because Kestrel can do it, doesn't mean it should. This is an edge server concern, especially when we're talking about security hardening. Most serious installs of Umbraco will be behind a different edge server that will do a better job.

Agree.