Request for a new header: State-Of-The-Art (opens in new tab)

If the same header automatically adds that meaning as well, your site can break essentially randomly, unless you keep tabs on the new stuff and adapt the site to handle them - in which case, you don't really need this header, you can just add the new stuff as it comes up.

If the header is fixed in meaning ("best practices as of 03/2017"), then what value was really gained over simply copy-pasting a list of the recommended headers as of that date?

It just seems like it's either mostly useless, or too dangerous to use.

You make people turn off safety features manually and the rest of us are fine.

That'd be a great way to make CSRF attacks from any domain a default setting.