Smaller models often read URLs like Python, not like fetch(). I benchmarked where the API key leaks