Also, malicious code can be pushed to the website if you are logging in through that. You have to trust that their infrastructure is safe.