> POST is protected because it assumes it (1) will change data That's is not correct. That's a community assumption that you're parroting. I have seen and impl

> POST is protected because it assumes it (1) will change data That's is not correct. That's a community assumption that you're parroting. I have seen and implemented plenty of endpoints where this is not true. There is no technical implementation barring a POST from any particular technical action.