"Keep in mind that your API key is visible to anyone, so any malicious user may use your key to send out emails that can eat up your quota."
Reply on news.ycombinator.com