Google's API key security advice was good for a decade. Then Gemini made it a liability.
Security researchers found 2,863 Google API keys — originally for Maps, Firebase, and other public services — now silently authorizing Gemini charges. Developers followed Google's decade-old guidance to make these keys public. The fix comes June 19. It is not automatic.