Do not use hosted cloud services where the implementation creates publicly accessible API keys and each HTTP request results in a charge to your account. A few specific examples are Firebase, Algolia, and AWS Lambda.

All it takes is one programming mistake or one bad actor and you can find yourself in an equally precarious situation.