Honestly, requesting by user id’s is how it should have been done to begin with. But any way, any conflicts would be the fault of the developer and not Twitch so it isn’t really fair to bash the new API. As far as “security issues” go, there isn’t anything that harmful you can request with the API, and anything that is somewhat sensitive information is requested with oauth tokens which wouldn’t lead to conflicts in itself because every token is unique.