“These are all authorization vulnerabilities and weaknesses that happen that we would, we would consider very similar to an unprotected or unauthorized API, right? If it was a public API, we had no authorization structure, like we'd have a very similar attack.”

Transcript evidence from Ken Toler -- Blockchain, Cloud, and #AppSec.