API key exploitation is more than hypothetical. In a different context, a student who reportedly exposed a GCP API key on GitHub last June was left nursing a $55,444 bill (later waived by Google) ...
Earlier this month, Telefónica and Nokia announced a collaboration to test how AI software agents could support the use of network APIs, as part of the GSMA Open Gateway initiative.