@wojtek.vivaldi.net.ap.brid.gy Yeah, it’s just security by obscurity, by design. To make some people shut up, to put it bluntly… Logged in to bsky.app, since it’s only checked at the level of the client looking at JSON responses.
Private data will be possible, see here for some plans: pfrazee.leaflet.pub/3lzhmtognls2q