> In API v1.1 all requests require authentication. Because of this, most JSON-P use cases are actively discouraged as it is rarely possible to perform without exposing your client credentials.

This is a bad move, IMO. Unless I use the official Twitter widgets, I can't request my own info/timeline on my static site?