Just because an API is poorly secured or misconfigured doesn't make it ethical or legal to exploit it. While the technical ability to bypass restrictions might exist due to bad engineering, that doesn't necessarily give you the right to do so. If the content is behind a paywall, you're likely violating the platform’s ToS and possibly laws like the DMCA or similar anti-circumvention regulations. The real issue here is with the platform's engineering and how it protects (or doesn't) creators' work, but bypassing those safeguards doesn’t fix that problem—it just contributes to it.