They are opening themselves up to termination if someone were to abuse those tokens for anything that violates the providers’ usage policies. Which are easy to trigger if you try.