For me the issue that needs to be resolved is letting "Joe Average" add AI into code and the need for API keys. I have tried to find easy workarounds (such as sharing a key via a secure Google drive folder) but all paths seem anticipated and blocked. To do that you need a domain (for Oauth) and then you might as well use environment variables.
It seems obvious that the API key creator should provide the access and not just expect us to print it out, write it down, send ourselves emails - just in case we forget where it is. We should be able link to the source.