[galaxy-dev] API keys and id encryption (silly questions)

Hello everyone, These questions are a bit silly but I'm really ignorant when it comes to security. Sorry about that. Why use API keys instead of user names? Is it to to prevent anyone from figuring out who is behind an URL? Or did I miss the point? Also, why encrypt the dataset/library/folder ids when a simple display is enough to get them? Thanks L-A