I mean you could still intercept and index API requests and generate backend code.

While this has nothing to do with pirating directly, it would still allow to replicate the backend (without business logic).