“Not allowed to” meet “real world”, “real world” meet “not allowed to” 
I agree, obviously, that it is a HORRIBLE design for an API, in fact it is just not HTTP. And I would definitely point that out to the API designers, especially the part about proxies dropping it.
But ultimately, sometimes, we have to use non-compliant APIs.
