How to whitelist specific json API requests

Hi,
For most websites, I use the “WordPress REST API” option to block requests to this API. However, I am increasingly noticing that plugins like Contact Form 7 or Elementor use this API for form submissions or post filter functions. Consequently, these are blocked (for visitors who are not logged in).

What is the best way to allow these types of requests?
Do I need to whitelist every request URI in .htninja for this?
Is there perhaps a more efficient way?

Thank you!