How to Block User Enumeration?

Hi,

I am trying your plugin to block user enumeration. So while I am able to block a URLs like

(1) https://www.domain.com/wp/v2/users ,
(2) https://www.domain.com//wp-json//wp//v2//users

but the URL
(3) https://www.domain.com/?rest_route=/wp/v2/users/

remain open for anonymous access, giving away user IDs.

I am a new user of Cerber and would like to know if I might be missing out on a simple configuration inside the free version of the plugin.

Thank you

Kind regards,