I bought a ebook from Kobo, having never heard of them before and thinking they'd be the small competitor to Kindle that offers a better experience. (Oops, they're owned by a big conglomerate.) I stupidly bought the ebook using my google account to sign-on. Then to read the book, I had to enter my google account username and password into their app! Their desktop app is clearly an electron-type web-based thing but they don't have an in-browser reader so there's no secure way of letting them do single-sign on. Here's hoping this app I know nothing about didn't steal my password - the only solace being that a desktop app can screw you over regardless if it wants to.