REST API Blocked by a Security Plugin, Firewall, or Server Rule

Symptom

Requests to /wp-json/ return 401, 403, or an HTML error page instead of JSON, breaking the editor and any plugin that depends on the REST API.