Any traffic that is not your client's, is unwanted. I have never ever had some scanning company called me, saying 'here you have 100 us$ because we used your data' or 'here are some tips to configure this better'. If someone is scanning you, it is always in their advantage not yours, no santa clauses on the internet ;)
Actually, there are. The Dutch Institute for Vulnerability Disclosure (https://www.divd.nl/) for instance. They scan the internet for known vulnerabilities and contact vulnerable companies to notify them. To ease their work they have strongly promoted the use of security.txt (https://datatracker.ietf.org/doc/html/rfc9116) which is now mandatory for government in the Netherlands.
It is completely run by volunteers, purely with the aim to make the internet safer. Don't know if any of the volunteers is called Claus, but you can call them saints :).
Regards.