We also plan on adding blacklisting check per API. So in your sensitive APIs, you can switch that on, whilst in GET requests, you can keep it off = good balance between security & speed