Players Friends Endpoint Shows List for those who Set Private

The Players Endpoint shows the list of friends for those who had set it private. This not much of a problem for me, but I would imagine others may find it so. 

Although I like this endpoint, is the fact we could see 'private' lists a sign that the feature to set it private about change site wide?

I mis-read the privacy implementation in the code, and as a result we released this before accounting for all constraints. The privacy setting is just one bit that needs to be better addressed. We have deactivated this endpoint for now, and we'll let you know how things unfold.

Thank you for reporting this promptly. It helps us immensely, and in fact we were able to remove this after a restricted list was exposed improperly only once — to you! That's the very definition of promptly alerting us to something wrong. We appreciate your help keeping us aware of things we have missed.

After a thorough code review, we have decided that this endpoint cannot support the privacy settings that the players have, and so we will not be publishing these data in an unauthenticated form like the current API.

I see.  One more reason to look forward to the authenticated API :-)