If you write an API you have a responsibility to ensure it cannot be misused. This is very hard.