It's an open endpoint for requests, the user would then approve or whitelist the key upon request...

This would allow request spamming of course, but since the requesting key is identity-based and not ephemeral like NWC, it allows for policies and automation around reputation that could suppress/report/ignore those