Joplin REST API: Why are certain endpoints whitelisted?

[rxliuli]

The web clipper has requested to fill in the token, so what is the significance of this api whitelist? @laurent

ref: I wrote a tag cloud website that can be used to view the usage of all tags