[Mengkudulangsat]

That's how I understand it too.

If your own API can leak your secret sauce without any malicious penetration, well, that's on you.