Looked at the site and read the comments which made me think about the HN post yesterday about hiding vulnerabilities in plain site (https://news.ycombinator.com/item?id=10889721). Like your idea though.
We're working on improving our API documentation. You can develop against our API and not use the supplied client.