This is great. One thing I would add:

The quality of the API is inversely correlated to how difficult it is to obtain API documentation. If you are only going to get the API documentation after signing a contract, just assume it’s dismally bad.

Sometimes you get the docs emailed in a password protected spreadsheet :')

This. It usually also means no OpenAPI standards, which makes integration much more difficult.