That's precisely the intended approach. We don't store your brokerage login data, we get an access token when you link your account and allow our application access.