[v4] Allow public info to be returned from the API

#11177 was closed to the current state of the v4 being underdeveloped. For the future I would love it to essentially encompass the v3 and allow us to both handle private sensitive information for authorized users and public information which already can be handled by v3.

Begin by reviewing the existing v3 and v4 API behavior described in this issue, including how public information differs from authorized sensitive information. Done means v4 supports the required public information while preserving access to private data for authorized users, with the scope and compatibility expectations made explicit.

Written by the indexing model from the issue text.