Hey there.
A couple things!
- https://api.github.com/users allows unauthenticated access
- We will stop allowing unauthenticated access this month
- Eventually, we’d like to restrict endpoints like this to the organization. We have some work to do around onboarding new team members before we can make that happen.