That's somewhat of a bummer, as it also forces all legitimate users to leave their endpoints acessible for everyone who knows the URL.
Have you thought about at least adding support for authentication where the credentials are generated by IFTTT? (Similar to the "secret" that you use for the trigger) This would allow makers to protect their endpoints while still disallowing spoofed requests.