B4X FEED How safe is my API keys?

[practicalsoft]

So I followed the instructions in this post

برای دیدن لینک ها باید ثبت نام کنید

and integrated google maps into my application. In that tutorial it says you should put your API key in the manifest editor like this.

B4X:

محتوای بلوک کدها در دسترس شما نیست. برای مشاهده بلوک کدها، وارد انجمن شوید یاثبت نام کنید

But now my question is, how safe is that really? I can take the APK and drop it into Android Studio and then go through the AndroidManifest.xml file to easily find the key just there in the open. I was wondering why the key had to be in the manifest in the first place and what is good practices if I want to safely use other keys throughout my application?

برای دیدن لینک ها باید ثبت نام کنید