No, you can admit that making the API simple was a mistake, but you always blame the person abusing the API (it's not like this is a critical system with valuab

No, you can admit that making the API simple was a mistake, but you always blame the person abusing the API (it's not like this is a critical system with valuable information). If everyone was acting in good faith, it wouldn't be a problem. (Though if someone is negligent with an important API, they should also be blamed.)