Whenever you're ready, walk me through how you'd approach this.
Explain best practices for designing scalable and secure API endpoints.
Discuss how you would structure the API, manage authentication and authorization, validate inputs, handle errors, prevent abuse, support backward compatibility, and monitor production behavior. Address the trade-offs you would consider when balancing security, performance, reliability, and developer experience.