Remove CSRF Protection / Creating LN Bookmarklets / Exposing JSON API

Is the CSRF protection for article submissions really necessary? What is the concern here? Does it really matter if an article submission comes from a page which is not on lamernews.com?

I'm making a bookmarklet that helps users submit content to LamerNews and I can't seem to mitigate the CSRF protection and get my bookmarklet to submit an article.

Is there a JSON API available yet for doing article submissions? I don't mind requiring users to authenticate for an API call, but I couldn't find anything.