Leaving directory indexing enabled is often considered a "low-hanging fruit" for attackers. It leads to , where sensitive data not intended for public view is exposed: Why Is Directory Listing Dangerous? - Acunetix
: Researchers and hobbyists use them to find public datasets, books, or media that aren't behind a formal landing page. index of files link
However, misconfigured cloud storage (AWS S3, Azure Blob, Google Cloud Storage) has created a new wave of index-like links. S3 bucket listing errors produce a similarly revealing XML-based index: Leaving directory indexing enabled is often considered a
location / autoindex off;