The public feed is there. And going through friends or friends of friends from your feed is there for any one to see. No reason for the site to even use the JSON stuff. That seems like it is making things seem more complex and Hackery to manipulate a lay person into thinking it’s more than what is already visible.

I skimmed the stories. Seems like it’s made up assumptions.

I’m not saying the way Venmo is, is right. Just that the site is painting a weird narrative.