The reason you use JSONP at all is because browsers don't let you make cross origin requests like that, but JSONP is a hack around that because it's executed as a js script hosted on another domain instead of making a cross origin request. The side effects of this are subtle and I need to make sure that I'm correct in that the fact this is purely public data mitigates most/all of that risk.