No problem! We've all heard a lot of bad tales recently, your stance is more than justified.

I keep my api keys on the site because i trust it, but i totally understand if you don't