Suggestion Description

Confluence Server REST API is active by default and there is no way to deactivate. 

It should have a similar option like the Enabling the Remote API where you can simply deactivate the functionality if you do no use it or even to prevent bad use of it.