It does look a little more nuanced, seemingly with Stripe allowing all sorts of actions that should have been restricted even with access the API key: https://

It does look a little more nuanced, seemingly with Stripe allowing all sorts of actions that should have been restricted even with access the API key: https://www.reddit.com/r/stripe/comments/1itn3i7/comment/me18vrp/ https://www.reddit.com/r/stripe/comments/1itn3i7/comment/me1... Truth often lies somewhere in the middle.