If any API URL will be convertable to a feed in the future, how is the wltoken special? Should it become a "generic" API authentication method applicable to all modules (and maybe formats?).
In some cases (see T92469) a private wiki might want to give out tokens for RecentChanges etc.