I also noticed lots of Github projects expose their gemini key and was confused. This explains a lot.