A counterpoint is that "normal" people should not be doing any of that at all. While I'm 100% in favor of making things easier for developers, you have to know

A counterpoint is that "normal" people should not be doing any of that at all. While I'm 100% in favor of making things easier for developers, you have to know what you're doing otherwise the easiest interface in the world will result in some "normal" people releasing a service which allows malicious users to abuse the service and rack up unlimited charges, potentially using it to harass unsuspecting victims with hundreds of calls per hour at 3 AM, for example. If callback URLs, SSL, etc. are difficult to understand, I consider that a sufficient barrier which requires people to have a clue about what they're building and understand the implications of their choices.