Hacker News Reader

I mean... it is a lot easier to do, than to program a procedure to revoke an api key.

Exactly. Easier but actually terrible for security since a MitM can intercept and use the key (and never actually revoke it)