The application's API endpoints accept requests without any authentication or authorization verification