You generally add a small "cost" to request an API key. For example submit your email to this form and wait a day. Then browser makes like this will not reason

You generally add a small "cost" to request an API key. For example submit your email to this form and wait a day. Then browser makes like this will not reasonable be able to request a new key automatically for every install. So they will just request one and ship it. Then when you get abuse like this you can disable it.