@dansup @h I guess blocking would be really tough, but making the API harder to use with something like request signing would add a significant challenge (that's what most mobile apps tend to do)
in the end, for reverse engineering folks it just tends to be an additional challenge :P
and I'm sure you'll put out an officially endorsed (to use) API at some point, so this is just some fun poking and a head start for the community to build things around Loops.