The author apparently works for Facebook, which makes all of the vague language in the story make a lot more sense. Would Facebook really let somebody do this

The author apparently works for Facebook, which makes all of the vague language in the story make a lot more sense. Would Facebook really let somebody do this to every external frontend server on a Sunday without some boring authorization first? The authorization could simply be denied with a boilerplate response about the right way to do things, with less emotional resources spent than the author apparently did.