> would you care to elaborate on how exactly you found those files and if this might have been the reason for the heavy handed response? usually swagger files would be locked down on the backend .

Presumably by visiting `https://site.com/swagger-ui` or one of the other common doc endpoints. It's not that hard, and many places do not lock them down (even if they should).