Hello Julian,
Our need is to have a quick set of pages that staff can view, with a few additional features that are not available in Totara. The REST api was deemed too difficult for this.
The solution here is to download the totara report every once in a while in a GDPR compliant manner and create static internal web pages behind our standard authentication with the additional features put in.
Kind Regards,
Raja.