Is there any security concern with having no org ids for keys or apis?

Yes it should

I see the issue is being addressed in this topic. Can you let us know the feedback based on my colleagues reply.