Hi @patrickchurchbuzzorg
I have tested with multisite and it seems to work just fine. I have also not heard of anyone else reporting otherwise.
If you do have any trouble please report back and let me know – but I think you’ll be okay. Cheers!
Within Multisite, can this be activated network wide? Just tried locally and it didn’t seem to disable /wp-json/wp/v2/users on any of the sites.
Are you certain that you were not logged into WordPress at all? If WP sees you logged in, you’re still going to be able to access the endpoints. That is the most common mistake people often make when testing to see if the plugin is doing its job. If you find otherwise please let me know how to replicate, and I can look into it.
You are probably right on that.