Would you be making the same argument if we were talking about your bank's website? IMO Effective access control works both ways. you can't send the ALL of the

Would you be making the same argument if we were talking about your bank's website? IMO Effective access control works both ways. you can't send the ALL of the content back and then have the access control work on the client machine. What if i just used curl and viewed the HTML raw to read the article?