I don't doubt this is a thing, but the place to look for anything concerning is information returned from these API calls going out over the wire. Very few plac

I don't doubt this is a thing, but the place to look for anything concerning is information returned from these API calls going out over the wire. Very few places encrypt or obfuscate their network requests with anything but base64, URL encoding, or maybe puny code, I've seen a few others but nothing difficult to figure out.