Nothing here was a leak or an exploit. The page described the same sign-in and the same calls the game client makes, and it was written for people building community trackers. It comes back the moment the developers give it a green light, and it comes back the same: dated, unofficial, and read-only.
If you built against it, the ground rules still stand. Tokens are a live game session and belong encrypted. The server browser wants its own Steam account. Poll like a guest. None of this is permission.
The rest of the developer hub is unaffected: the dedicated server reference, the RCON OpenAPI spec and the map guide are all still up.