IPFS Http Client Link Access without Token

Questions
1

Hey,

I’m following the code here(https://infura.io/docs/ipfs#section/Authentication/Using-ipfs-http-client-in-JS
) and I’m able to add to IPFS without the auth token in the header (my code below). How is this possible?

const client = create({
    host: 'ipfs.infura.io',
    port: 5001,
    protocol: 'https',
  });