Yes youtube inner api is a public server, even with a domain name, and there’s nothing blocking it, no authentication. Some people say it’s against youtube api ToS but they shouldonly apply to their official api. Now in court you are never sure whay they’ll do
you can also use GrayJay (discovered it today)