I previously thought so too, but turns out you can use the graphQL endpoint with the Chrome cookies and it's virtually indistinguishable