Helix searching user by username returns 401 error

So this endpoint no longer works without OAth? When was this change made? It used to only require a client id. Why does it now require OAth? That makes it pretty annoying for application developers to use this endpoint…