You can generate a specific API key, and make sure to monitor it by setting a budget limit to it. They should explain this to people in their form to avoid people pasting their main key.