Back in 2014, I worked at a place that was interested in purchasing a Mykonos for this purpose. A couple years prior Mykonos the company had been purchased by Juniper and rebranded as JunOS WebApp Secure (JWAS)[0]. More than just a honey pot, it created a profile of attackers based on their source and what vulnerabilities they were attempting to exploit. It would dynamically expose vulnerabilities based on this information. It sync'd this information with a cloud-based threat intel service run by Juniper. Unfortunately, I didn't stay around long enough to see how well it performed.
Totally agree, I think since then we have move forward quiet a bit. At RSA this year we heard move about moving from assume breach to the attacker mindset. IMO these are complementary and deception can help bridge that gap.
[0] https://thenextweb.com/news/juniper-networks-buys-smart-secu...