Timestamp fields not sanitized by strapi

[sunnyson]

You can use privateAttributes for this.

"privateAttributes":["created_at", "updated_at"]

https://strapi.io/documentation/developer-docs/latest/concepts/models.html#model-options