It’s much harder than that to prevent fingerprinting, or the use of legitimate APIs for illegitimate purposes.

In any case the idea that you can achieve privacy and security solely through managing APIs is simply false.