I found a few github issues related to api key security and management. I'm not 100% sure of your point.

I see no open issues.

It's around 1k lines of python, audit the code if you care and rotate your keys.

Or don't use it.