>Personally, I'd rather see a more aggressive AGPL where REST calls are considered linking and trigger virality

Please don't compare a license to a virus. In any case, my understanding is that the AGPL does cover this and is why it exists. If it didn't cover this it would be useless.