I just went to update my hosts file with this script and that API endpoint is now locked behind required authorization. You can still download host files in the clear by hand, and they now include DNS entries, so maybe that will be good enough for dual-stack? Still not sure why a public view has to be behind auth now.