Presumably they are meant to add authentication to their API if they don't want a third party client accessing it. If they believe they have a leg to stand on they can try to get it removed from github. What you don't do is threaten to collaborate with the Chinese government to murder them.