rclone was sharing an API key publicly. Not really a security flaw but understandable to block. Except that they shut down the ability for anyone to get API keys a while ago, so users can't get their own.