Publish key doesn't emphasize, that this is the secret key.

On centralized platforms you can give someone publish rights, and later revoke it with your full/admin access.