API keys have been routinely stolen in mass automated attacks for malicious usage long before LLMs even existed