Incorrect - if booked through Qantas then 'Secure Flight' data needs to be added before it will ticket. The system will NOT ticket it - automatically or manually.
By saying that - anything can be added in the 'Secure Flight' data, doesn't need to be correct or specific.
APIS is a specific suite of information, and it is not required to issue a ticket.
I book all my QF flights online directly with Qantas, you only have to provide you name (as it is on passport), contact number, email address and since covid the postcode where you reside during the booking process. You are not asked to provide your APIS (Passport number, passport expiry date, nationality, DOB or place of residence in the USA - this last bit is for USA only) as part of the purchase prior to ticketing.
I have flights to US on a OWA and these were ticketed without providing APIS. I have also booked two other paid international return flights this year directly with Qantas online and again both were ticketed without completely APIS. You add your APIS details online via MMB anytime prior to check in, and usually well after ticketing.
APIS is a requirement for flying, not for issuing a ticket. Of course if the name the ticket is issued in doesnt match your passport name you will have issues. Burt any QFF would have correct name in their profile anyway.
People get tickets issued up to 12 months ahead of flying, they may choose to delay entering APIS as they are due to get a new passport before flying or havent yet decided where they will be staying i.e. booked a hotel etc.
If APIS was required in order to ticket a flight the APIS data would be requested during the booking process.
I have no idea what you are classifying as "Secure Flight" data as again this temrinalogy is not used during the online booking process with Qantas and is not APIS which is what both the OP and myself are talking about.