Do you need my exchange API keys? — Not necessarily. A key is optional and read-only, and it does one thing: it brings your fills and funding into the journal.
How exchange keys are kept — What happens to a key after connecting, who can see it, and what the worst case looks like.