For me that behaviour would make sense.
Note that before reading that topic, I had another idea how to solve this kind of scenario: New Folder type: Receive Only
My idea would require more configuration (multiple “send-only” devs instead of one “receive-only” dev). However, to protect nodes of the cluster, it is more intuitive to “setup shields” on the nodes to be protected instead on the “intruder”.