Isn't there the (likely) risk that this will get one's Instagram/Facebook account banned, since it violates ToS and since one is using one's own cookies to do this?
Mine account was shadowban for days with similar technique.
So IG definitely count API calls per user and may harm bad users
I thought the title said no credentials needed?
yes
"without credentials (just token from cookies)"
GTFOH
Title is incorrect; this requires authentication and login cookie.