a better analogy would be, you're invited to a friend's apartment, there's a living room, a bathroom, and bedrooms. Some doors are shut and some are not. You cl

a better analogy would be, you're invited to a friend's apartment, there's a living room, a bathroom, and bedrooms. Some doors are shut and some are not. You clearly were invited to enter the dwelling, much like a web server invites you to use a service. You are invited to sit on a couch, but may not be invited in a bedroom. If the door is locked, it is clear that it is restricted, if it's not, it's ambiguous. As per other people's comparisons, some things are implied restricted: credit card information of another individual is not for you to see. The door to a bathroom is closed: If no one is in it, you may enter, if someone is using it, usually not. I think in the bathroom analogy, it's clear that 1: A person should lock the bathroom door if they want privacy and 2. An individual may want to knock if a door is shut instead of trying the door. Therefore, engineers should explicitly restrict access to certain data (rate limits, terms of service, passwords etc..) and people working on projects and what have you may want to actually ask: (is it ok, if I do this?)