Disable default WordPress REST Endpoints

functions.php

<?php

add_filter('rest_endpoints',
	function($endpoints) {
	foreach ([
	"/wp/v2",
	"/wp/v2/posts",
	"/wp/v2/posts/(?P<id>[\d]+)",
	"/wp/v2/posts/(?P<parent>[\d]+)/revisions",
	"/wp/v2/posts/(?P<parent>[\d]+)/revisions/(?P<id>[\d]+)",
	"/wp/v2/pages",
	"/wp/v2/pages/(?P<id>[\d]+)",
	"/wp/v2/pages/(?P<parent>[\d]+)/revisions",
	"/wp/v2/pages/(?P<parent>[\d]+)/revisions/(?P<id>[\d]+)",
	"/wp/v2/pages/(?P<parent>[\d]+)/revisions",
	"/wp/v2/media",
	"/wp/v2/media/(?P<id>[\d]+)",
	"/wp/v2/types",
	"/wp/v2/types/(?P<type>[\w-]+)",
	"/wp/v2/statuses",
	"/wp/v2/statuses/(?P<status>[\w-]+)",
	"/wp/v2/taxonomies",
	"/wp/v2/taxonomies/(?P<taxonomy>[\w-]+)",
	"/wp/v2/categories",
	"/wp/v2/categories/(?P<id>[\d]+)",
	"/wp/v2/tags",
	"/wp/v2/tags/(?P<id>[\d]+)",
	"/wp/v2/users",
	"/wp/v2/users/(?P<id>[\d]+)",
	"/wp/v2/users/me",
	"/wp/v2/comments",
	"/wp/v2/comments/(?P<id>[\d]+)",
	"/wp/v2/settings",
	] as $forbiddenEndpoint) {
		if (isset($endpoints[$forbiddenEndpoint])) {
			unset($endpoints[$forbiddenEndpoint]);
		}
	}
	return $endpoints;
});