Enumeration doesn’t have to mean using a brute force search. One could simply make the api call and then update a local database with the result. That local dat

Enumeration doesn’t have to mean using a brute force search. One could simply make the api call and then update a local database with the result. That local database would then become the potentially exposed data.