So there is no authentication on the API endpoint? I have my PS4 connected directly to the Internet to avoid NAT issues, and I wonder whether the API would be available openly as well.
Still, I'd imagine most PCs and game consoles are behind a firewall and ports aren't forwarded.