CR is just one service. What if a bug in my app lets users rinse my Gemini API usage, etc.