Presumably such an API would be restricted to only accessing data generated by the person who approved the API. For example, it would prevent any kind of "news

Presumably such an API would be restricted to only accessing data generated by the person who approved the API. For example, it would prevent any kind of "news feed" functionality until your connected network also granted access. (This is distinct from what happened with CA)