[orhmeh09]

There are plenty of legitimate uses for that. How do you tell legitimate from not?

[LimitedInfo]

make people sign up for the api with a reason for using it. Then the api key can be revoked if it's just being used for doxing.