API output could just be considered text. So whoever loads this api and loads the video is in violation, and not the api devs. Just a guess.