I guess one of the most basic problems that could occur is someone using your keys to make unauthenticated requests and exhaust your rate limit.