It even shows in an incognito window without having logged in first

That API method should be authorised though. Might be worth looking into. https://cdn.discordapp.com/attachments/1194956551824363700/1194959364700782602/image.png?ex=65b23fa1&is=659fcaa1&hm=2e10ae43ea55fa124ea3ff4b741b8e49163d39b3cfc8de60c1275c5891c4d83a&

THis is the 7.4.3 version, don't think it was secured back then

I'm looking at the 7.4.3 tag. But actually it looks like there was a limited version of the object that did include the version https://cdn.discordapp.com/attachments/1194956551824363700/1194960218761736302/image.png?ex=65b2406d&is=659fcb6d&hm=558cb0e59cf931f4c107df8fb90e94aa12b6456a1c79df3c9d8d702204273aca&