Google just killed my ~$1M ARR startup because a hacker abused THEIR API design. 100k users locked out, 1M+ photos frozen, and they billed me for it. i will not promote.

I run a live app with ~100k users, over 1 million customer photos, and around $1M ARR. For the last 72 hours it's basically been dead because of a Google Cloud suspension. Here's what happened. My app uses Google Maps. Like every mobile developer, I have to ship a Maps API key inside the app because that's literally how Google tells you to do it. Their docs even say these keys aren't secrets. What I didn't know is that if Gemini gets enabled in the same Google Cloud project, apparently that same key can be