Sharing publicly an API key for read only access

Hi, thanks

  1. Am I wrong if I understand that the encryption secret = passphrase?
  2. Then, my safety concern is now more related to the fact that I will be sharing the access grant to everybody. Although the access is list and read only, could it be a security risk? I mean, will it allow someone to make some malicious use of it? I was reading this post by jtolio here Sharing ML Dataset via read-only access grant - #3 by jtolio
    do you think his advice is still valid? Has this “flaw” been addressed? He recommends an access key, which I understand is a S3 access which a priori I did not want to use (and access grant seems safer)

Thanks