I think that's the use case with public data or webhooks where you need verification to move forward.
APIs with authorization it seems to be missing almost entirely - I think that has to catch up. I hope it does, makes my cynical and security focused nature less twitchy 😁