Depends on the key. It may be the key to the kingdom or it can be a do not care (say, for a repo with 5 suggested problems to discuss at interviews).
Naturally "a stolen key" here means that the key has access to something worth stealing. And my point was that there's far more worth stealing than your users' private data which many companies don't value that much.