That's like saying that my front door isn't shut because the doors to rooms inside are open. When people say 'API' they mean the public-facing endpoints, not the internal ones that are only accessible to Twitter's developers.