Only logged-in users can view the frontend, backend or content of the REST API if this plugin is activated. The password reset process on wp-login keeps on working.
This plugin is very simple and can also be used as a must-use plugin. That way no admin of a website can deactivate the plugin, making sure the requirement of just authenticated users is ensured.
! No automatic updates are made for mu plugins