I think your workaround is good for most people. But it's problem for services which can't be offline for a few seconds every night.
I just disabled mod_security as I'm using Cloudflare WAF anyway. Of course this is much more a workaround and not a solution.
Is the modsecurity package from...