I think the right balance is to air gap a database and allow access to the public by your standard: show up somewhere with a USB.

I think it's right to prevent random drive by scraping by bots/AI/scammers. But it shouldnt inhibit consumers who want to use it to do their civic duties.