A developer needs to connect a service to an API. The documentation says to generate an API key, store it in an environment variable and pass it in a header. Five minutes later, the integration works.

Google's new API key architecture has come under scrutiny due to significant security flaws that potentially expose user data ...