I'm seeing /statuses/friends require authentication for multiple non- protected users. Meanwhile, /statuses/followers is returning statuses for the same users.
{"request":"/1/statuses/friends.json","error":"This method requires authentication."} -- Subscription settings: http://groups.google.com/group/twitter-development-talk/subscribe?hl=en