Concerning, but still much better than giving a third party your username and password which could be used to initiate a transfer or something.