I don't really understand your complaints about API keys, but if you did want to make an issue of something perhaps it should be that you get your API key sent

I don't really understand your complaints about API keys, but if you did want to make an issue of something perhaps it should be that you get your API key sent to you by email, in plaintext. Not amazing, but I guess for their threat model it's generally ok.