I have seen similar bugs in cloudflare API recently as well.
There is an endpoint for a feature that is available only to enterprise users, but the check for whether the user is on an enterprise plan is done at the last step.
https://www.cloudflare.com/careers/jobs/?department=Engineer...
The feature is only available to enterprise plans, it should not even allow external verification.