8 lessons and takeaways from Google’s API leaks