> If a person is authorized to make the API call, the person is authorized to make the API call.

That's not how the law works today. Weev was still tried for accessing publicly accessible URLs.