Block WP JSON API Get Users

functions.php

<?php

/**
 * Block Users JSON API
 */

add_filter('rest_endpoints', function ($endpoints) {
    if (isset($endpoints['/wp/v2/users'])) {
        unset($endpoints['/wp/v2/users']);
    }
    return $endpoints;
});