API key exploitation is more than hypothetical. In a different context, a student who reportedly exposed a GCP API key on GitHub last June was left nursing a $55,444 bill (later waived by Google) ...
Google launches Nano Banana 2 under Gemini 3.1; supports 4K output and aspect ratio control, widening use for design and ads.