Publish  key doesn't emphasize, that this is the secret key. 
On centralized platforms you can give someone publish rights, and later revoke it with your full/admin access.