You can delegate to applications which other people are using, I don't see why that should be a problem. Plus an API token is more trackable than just sharing y

You can delegate to applications which other people are using, I don't see why that should be a problem. Plus an API token is more trackable than just sharing your password. It would be an improvement over current.