if it can be scammed out, somebody will do it!
I really mean the other "free keys" of course (for those just joining the convo) where someone bags a whole bunch, then drip feeds them as gifts or (like on steamgifts) public GAs.
(and on a broader note / tangent)
in the UK, taking one key for personal use counts as a fileshare (which is legal), multiple keys count as piracy as you must have profitered either personally or financially to even had the idea to do so. also the law here applies to citizens of the EU, and any country with an extradition agreement - so if for example someone from the EU on here was to be found to be supplying exploited keys to someone from the UK (or perhaps should there be sufficient evidence to suggest that) then the UK CAN bring charges against them (though it would of course be an EU, rather than a UK court that tries them). Apparently that thinking has been quite succesful too.
It does not however cover the lieks of spare humble keys etc as they are a paid for product and the law regards second hand goods / purchased licences in a different manner (ie its yours - give it away if you want!).