Maybe a bit of an improvement over the current method of using passwords would be to take the user's username and password, immediately using them to connect th

Maybe a bit of an improvement over the current method of using passwords would be to take the user's username and password, immediately using them to connect the account using OAuth, and then store them no longer. This would make the connection persistent if the user changed their password, and would eliminate a lot of the risk.