Disable REST User Exposure

How can you disable rest user exposure in WordPress? This use case shows how a focused WordPress code snippet can handle the task without installing a heavy plugin. The snippet should hide user data from unauthenticated REST API requests and produce this result: Anonymous visitors cannot list WordPress users through the REST API. You can also log in to LeonLab.ai, describe this WordPress use case in plain English, generate the snippet, review the PHP code, and deploy it to the selected WordPress project.