I currently have an experience dedicated to custom map testing in private servers.
Players will ask the game server to load their public module containing a map. Although this opens up the custom map testing experience for remote code execution, no single API has led to permanent effects.
With the introduction of Ban API, malicious actors now have the opportunity to anonymously and irreversibly lock out all players from the experience across all other private servers.
Outside my own situation; Ban API could also potentially be utilized in public modules in any experience anonymously and irreversibly.
Please, do add an experience setting to disable Ban API, ASAP.