Token relays hide API risk

Simon Willison points to Matt Lenhard's investigation of discounted LLM token resale, where proxy services can pool API keys, free trials, support bots, stolen cards, or chargeback paths behind one cheap endpoint. Why it matters: Cheap tokens are not just a pricing trick. They can move data, billing, and abuse risk into a supply chain the buyer cannot inspect.

Try this: Before using a low-cost LLM proxy, ask what account supplies the tokens, what logs are kept, and whether sensitive prompts can be routed to a direct provider instead.