For some organisations operating a tile server is a business, others just want to keep the traffic in check.
In both cases they want to control who has access and how much they utilize the service. The easiest way to do this is to make using the service dependent on obtaining an API-key and including it in the tile requests. This is often the case even if a service has a free tier as you need to be able to generate usage numbers per customer in some form.
it’s what I was thinking.
So the thing to keep in mind ( for those who are concern ) it’s that it track visitors of the website too.
Meaning that the tile provider know that the visitor is coming from that particular website and therefore could generated various stats…