Not necessarily, you can use Oauth2 tokens extension on gmail; that way you don't need to hand over your password(s). Mind you it does nothing to protect you a

Not necessarily, you can use Oauth2 tokens extension on gmail; that way you don't need to hand over your password(s). Mind you it does nothing to protect you against the token bearer fooling with your mailbox.