In Depth: The New API Dependency Risk in the AI Stack