We don't know what the stolen keys were used for, that will require real transparency on OpenCode's part, like an open dataset of the original queries, so we can do our own analyses into the nature.

I would recommend running your own gateway instead of uploading keys to a vendor. My gateway of choice is GoModel

https://gomodel.enterpilot.io/