One thing I don’t see people discussing here is that API calls often have consequences. Like, if you make a call in your trial-and-error process that inserts a row in some database, and that’s about it, it’s not a really big deal.
But I’m thinking of:
1. How badly secured many real-world APIs are and how many API keys are out there to be scraped
2. Some APIs offer truly destructive or otherwise irreversible actions.
Suppose for one second there was a poorly secured API to control medication dosages. Or to deliver a lethal injection to a death row prison inmate. Or to detonate a building scheduled for demolition. Or, …