Hacker News Reader

So they do use Google's API to do this, and not a direct password authentication.

Then what's the problem? That is certainly not phishing...

Not everyone uses Gmail. The fallback is to ask for your email password. Really.