@Gargron would be interesting to somehow get past this protection for users which have a good standing, i.e. the account is N days old, and has had N activity. Could maybe per-server configuration...
Would something like this, be something you'd accept in a PR?
@indirection I'm confused, aren't you asking why the search API isn't public? There is no "good standing" for anonymous public access