It's interesting that this is getting upvotes. I remember on 2016 the overnight shift from companies having open APIs being considered good to it being considered "dangerous".
Having an open API doesn't mean you can't require authentication and authorization for requests, and having a link to something doesn't mean you have permission to access what's at the other end of that link.
However, I don't think it's a fair comparison. In the CA case, users were deceived into a research and had their social graph being accessed without being told such implication. Here, the user has the control over the generation of links and the resource being linked; the user must manually generate and invoke the link to cross-access resource between apps.
[1] (https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Ana...)