Wow. OK. Well, I’m following some common best practices like safeguarding the API key (not posting to git, for instance - or anywhere), keeping it only on the server, and the helper is a trusted resource.
But still, disappointing to hear that the hard limit isn’t actually one. I guess before we move this to production (if it comes to that, and so far my customer service Assistant hasn’t been great), we’ll need to do a lot more research into that.
Maybe this Monday’s “big announcement” will be that billing will work As Expected. 