Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI assistant and access private data. [...]
Previously harmless Google API keys now expose Gemini AI data
Summary + source link. No paywalls, no tracking.