> There are some startups building capabilities apis to limit that but most websites/apps either don’t have the resources or aren’t willing to expose those capabilities.

Care to elaborate with example(s) of a startups doing this?