Both ws/2/collection and ws/2/collection/ return collection list for the latest cached user or something like that.

(At least, it doesn’t leak private user collections.)

Even though it is not in documentation, it is expected to return collections for the current user by MusicBrainz Picard and Python bindings, and thus should be officially supported (and documented!).