Glossary
Anonymous Access
Anonymous access permits a specific, narrowly scoped action without requiring the requester to have any established identity — browsing a public catalog, submitting a support request, viewing published content. Done deliberately, it's a conscious decision about exactly what unauthenticated parties may do, bounded tightly enough that the absence of identity doesn't translate into broad, unaccountable capability.
The risk is treating 'no identity required' as equivalent to 'no limits apply' — an anonymous path that was only ever meant to support one narrow action can quietly become a path to much more if new functionality gets added to it without revisiting whether it still belongs behind that same unauthenticated boundary.