In reply to mark k..

Why do you need the REST API at all as you could have just written a node.js script that reads directly from the DB
Are you seriously asking that question?

So you would rather have them write the db stuff from scratch than use an already available/tested/secure WP API?