Incredible detective work!
Why would discord let anyone delete a webhook?
I'd think anyone can post to the webhook, but you need to be authorized to modify it.
Why would discord let anyone delete a webhook?
I'd think anyone can post to the webhook, but you need to be authorized to modify it.
Why wouldn't they? Blocking it just leads to more abuse of Discord and its users.
It's like if AWS had a public end point to invalidate access keys. If access keys are public they will be used for abuse, so it benefits everyone if anyone can report these access keys to AWS to have them deactivated.