The existence of a public interface usable by humans (a web app) does not in any way imply the existence of a machine-usable protocol for accessing that same functionality. If you infer one, you do so at your own risk. By the same token, the existence of a machine-usable interface that is not public does not imply a contract that it will continue to exist.
If you build your business on an imagined contract, be prepared to have a bad day when the other "party" to the non-contract "violates" it.
Is that non-implication better for consumers? For people?
If not, why should it exist?
Machine-usable protocols is what make possible to humans use public interfaces (web apps)
When was the last time that you injected electricity to a cable to send a HTTP request?
How is that relevant? Putting up a web site does not obligate you to then do more just because it would be even better.
You access HN by your browser, the same as Zenefits' customers accessed ADP services indirectly ..
The point is where to put the line between what's a good allowed access, and a bad too-much-indirection access