
All your API belong to us!
Also ... if everything can be controlled through an API on your infrastructure, then the first person to happen along who can pwn some app with administrative rights to your infrastructure can tear it all apart.
"And it was at that point he realized that this must be stopped by any means possible. The rest, as they say, is history (but not the kind of history that small children should be allowed to read because they will have nightmares)." Sounds like the germ of a BOfH story...