A pagination cursor is not a forever pass

List endpoints often authorize once on page one, then trust the cursor for every next page. That is how a revoked membership keeps paging through results you meant to cut off. The bug pattern A common