As with many vital pieces of online infrastructure, our reliance on web APIs makes them attractive propositions for attackers to target.