Thanks for all the feedback everyone. As @donny mentioned, we’ve updated the terms for clarity. The intention was never to remove the ability for partners to provide bespoke solutions for their clients. The merchant owns their data, and their API credentials are there so that they can access it.
We really appreciate the depth of responses in this thread, thanks to everyone for taking the time.