The "/rest/build" API can change the build status also but it requires ADMIN permission and other information could be also changed.
So, I think, an API only for recommending or unrecommending a build would be very helpful.

The API should check the user permission on the configuration where the build was triggered and need to check build listeners also :-)