Broke our website for three days

I do digital support for an arts institution that uses our website to sell tickets to events. We’ve been using Members for four years with no problem when all of a sudden our calendar went down, with no event appearing anywhere. Our web developer tracked it down to a Members option to hide protected posts from the REST API, which effectively was everything on our calendar. I don’t know if this is a new option that just was added during an update or if something caused it to flip on all of a sudden, but it took a long time to work out the issue, given that deep in the settings for a back-end permissions plug in is about the last place I’d look for this type of issue. I would love to hear an explanation as to what happened but until I do, I would recommend no one use a product that would do something this thoughtless.