If these posts are included into the public API posts endpoint, then yes. We will get them, protect them and monitor them.
Custom Post Types are referred to other endpoints. All the information of posts in a WordPress site is found on the endpoint posts of the API, and that is exactly what our system is looking for.