Comment by harryhuang

Answered you on Twitter but just reposting here in case anyone else wonders the same thing:

Essentially to prevent API misuse (which you have a good point with, it can be solved by rate limiting) and for any features in the future that might need to be user-aware.