Restrict plug-in use of REST API

Does this plug-in restrict legitimate use of the REST API by installed plug-ins or WP core when the site visitor is not logged in, e.g., a public informational website?

Or does it only affect external calls to the site, likely by bots attempting to get a list of users, etc.?

Just want to make sure it doesn’t restrict legitimate use of the API.