Is the API key in the Rest API secure?

Lovely explanation! Thank you very much!!

Lets think of a case I also mentioned in the original post: the API call that has to be made to Google Maps API to get predictions in the Autofill function presented in perfect functioning detail here:

The simplest solution I can come up with is: hosting in Vercel the edge function that does the call and trigger it through Supabase and an “Insert” somewhere to avoid exposures. Weweb has a plugin for Supabase, which has one for Vercel to handle variables etc.

Is this the way ?