>> protecting that data from scraping, and/or hiding it behind a login

And even behind a login can still be scraped. (The proverbial "If I can do it anyone can" applies here along with "where there is a will there's a way")