Yes, that is right. I was hoping itch.io might have something in place like checking the IP or delaying the key claiming. And as I can create keys in bulk I would not really mind someone spending hours to claim a few hundred keys.
