as an intermediate beginner, a question that immediately came to my mind is: what are such measures good for if an accepted, but let's say "owned", developer gets access granted on such restricted APIs?