Hardcoded Google API keys in Android apps now authenticate to Gemini,
exposing developer resources on Gemini and any uploaded user
content ...