Actually, the phishing theory is a very plausible explanation of where sci-hub gets passwords from. I can't imagine someone giving up their password voluntarily

Actually, the phishing theory is a very plausible explanation of where sci-hub gets passwords from. I can't imagine someone giving up their password voluntarily even if they believe in the cause. That can lead to very serious repercussions with your university. The fact that Elbakyan does not deny this explanation outright gives it further credence. (Full disclosure: I love sci-hub.)