Trying to open a URL for an issue that does not exist shows the "Issue Does Not Exist" error page, even if you are logged out and the project is not publicly viewable. In contrast, trying to open the URL for valid issue will prompt the user to login.

In this way, an unprivileged user can learn information about what issues exist in the system and, over time, the rate of issue creation.