Correct. This cannot be prevented.

Also for API keys you can just search for keys from basically any weather API and you will find credentials on GitHub. People also sign up 10x for free API services to circumvent typical request limits per day.

At some point I may have to block certain IP addresses or HTTP Origin referrers because of abuse.