After what they did to Facebook because of what Cambridge Analytica did using API access, this makes all the sense in the world. API access, even if it's read-only, is a huge liability.