Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

Crypto products usually treat transfers as an execution problem. The interface has to show the route, estimate fees, handle ...