Is there a Threads scraper API that works without Meta App Review?

Yes. Social Fetch Threads routes read public profile and content data. You authenticate to Social Fetch with an API key (x-api-key). You do not create a Meta Threads developer app or OAuth as the Threads user whose public data you are fetching.