API is open for outside access. Anyone can request for files. You cannot expect somebody to go an official way.