Why would they completely limit API write access when there's a less nuclear route to prevent abuse as detailed in the article?