The biggest anti-pattern of all: marketing your API as RESTful, when it is really more RPC-like.
I agree on all points of this article. The only nitpick I have is that tunneling through GET/POST is strictly necessary for HTML forms, since they do not support other verbs.