No issues found.

Previous issues (workaround for accessing the User REST API and traditional user enumeration via /?author=1) have been resolved.

There is a minor finding where inline JavaScript has been included where the WordPress script enqueue method could rather be used.