System-features interface lacks access control, rectification required

Discussion
1

/console/api/system-features, this interface lacks permission control, which led to detection by local network authorities and a demand for rectification. What solutions do you all have?

2

This interface is unauthenticated by design. We are currently disputing this reported vulnerability regarding the unauthenticated interface with the CVE organization.