While the attack is using things for a different purpose, using JSON to provide data to a website is totally legit. I don't see how people could have prevented

While the attack is using things for a different purpose, using JSON to provide data to a website is totally legit. I don't see how people could have prevented this without the knowledge of such an attack