Removes the public WordPress REST user endpoints to reduce username discovery on sites that do not expose author archives or public user directories.
add_filter( 'rest_endpoints', 'wpfolks_disable_rest_user_endpoints' );
function wpfolks_disable_rest_user_endpoints( $endpoints ) {
unset( $endpoints['/wp/v2/users'], $endpoints['/wp/v2/users/(?P<id>[d]+)'] );
return $endpoints;
}
