Double negative. An attacker using the API in an "obviously unintended" manner shows intent.

i am not quite sure what your question is, as you simply quoted me and then put a question mark... i think you are confused that i used "intent" in one context, and "unintended" in a different context, is that right?

the first sentence: the difference is the intent of the person who caused the cancellations

the second sentence: but if i (or an agent working on behalf of me) abuse an API to do things it was not meant or designed to do, such as cancelling someone else's reservation