Since Odoo web client uses JSON-RPC, the XML-RPC service, if not used for integration with other systems, becomes redundant. This addon disables Odoo XML-RPC endpoints, thus reducing Odoo's attack surface.

I would be grateful if you reported it on the project's issue tracker.