What are the negative aspects of creating fake security footprints

Question

I've heard about fake security footprints, where organizations or individuals create misleading logs, honeypots, or decoy credentials to confuse attackers. While this seems like a good defensive tactic, I wonder about its downsides.

• Can fake security footprints backfire by confusing legitimate security teams?
• Do attackers eventually learn to identify and bypass such deceptive measures?
• Could this approach violate compliance or legal requirements?

Would love to hear expert opinions on whether fake security footprints help or hurt overall security.