Not a bad idea, however, usually you don’t want your Vault API open to the world.
If you require that, it might be useful to put a LB or proxy (ie, nginx) ahead of it to route certain things like health and certain paths only for authenticated (ie, bearer token or other org access) requests.
As for a change to allow this, you might get more 
on it with a GH issue.