CLOUD SECURITY REVIEW ALERT
A public endpoint is not automatically a breach. The returned data and authorization logic determine exposure.