Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
I wanted AI help, not a round trip for my private documents.