Depending on the tracker once you notice a stolen API key it might already be too late. E.g. if they tank your ratio or break the rules in another way.

I could see the real source IPs for all other users in last logs.

Also, they mention in the slides that some seedbox providers allow users to find the IPs of other users connecting to the seedbox. Using a VPN for ssh might be advisable to protect your privacy from other users.

Otherwise your right as it won’t impact your network at home.