This has been giving me a headache for hours, but I think I’ve finally solved it! The issue seems to be with the URL encoding. When I replaced the "%2F" with a "/", I was getting a 403 error. Requesting a URL with "%2F" worked for me and returned the correct real-time train data as a protobuf response with no nonsense about auth or API keys.
Here’s the working URL I used for the G train: