This makes sense. These keys were designed as project identifiers for billing, and can be further restricted with (bypassable) controls like HTTP referer allow-listing. They were not designed as authentication credentials.
2024年12月24日 星期二 新京报
，详情可参考heLLoword翻译官方下载
Automated systems making consequential decisions with insufficient human oversight
Hugging Face (What is Huggingface?)