account/verify_credentials is pretty much the only endpoint I have found so far that you can access with the token of an account that is locked. Most other GET endpoints such as friendships/show result in an error being thrown. I feel like that endpoint should error as well.
Is there a reason it doesn’t or is this something that was overlooked/a bug?