How is that a problem that's unique to openrouter? Who's to say when I query the Anthropic API directly, wanting to use Opus, but they determine it doesn' need Opus, route it to Sonnet instead and pocket the difference? The only difference with openrouter is that it's another layer where this type of fraud could occur.
OpenRouter's list of providers is very large and includes many little known and sketchy companies.