APIs are a favorite target of attackers because they can be used to perform almost any task and often have high permissions.