> SendGrid engineer reports API keys generated by the AI are not only valid but still functional.

> GitHub CEO acknowledges the issue... still waiting for them to pull the plug

I agree this is an issue for co-pilot as well - but it's really on send grid to invalidate keys that are known to be leaked?

Yes, that's inconvenient for the affected customers - otoh they won't get billed for other people's usage - or dinged for someone spamming using their keys...