Most website owners don't know how to set up a http header. Making a favicon is already enough of a pain for non-technical people, having them to configure their .htaccess would just make it even worse.

Also, what about robots.txt ? Would you also recommend a X-Robots-exclusion-file: /robots.txt ? Doesn't it work well enough right now?