Double negative. An attacker using the API in an "obviously unintended" manner shows intent.