The thing is, Bob doesn't need the API to publish all your private status to the whole world... he could already do it in plenty other ways. Same thing with email... many of them (eg. gmail) come with RSS feeds.