API returns data without token

Hi, https://gorest.co.in/public/v2/users endpoint is returning data even i dont set a token or set a wrong one ? How this can be possible ?

Token not required for GET api,

Token is required in GET api to retrieve the data that you created or modified

Invalid tokens are ignored and api will return the public data

Now invalid tokens returns 401 error

Little markdown supported