Let's not let that be an excuse to settle for poor security, either from Github or our banks. I agree the way Plaid/Yodlee/etc ask for passwords is insane. I'v

Let's not let that be an excuse to settle for poor security, either from Github or our banks. I agree the way Plaid/Yodlee/etc ask for passwords is insane. I've "closed the tab" several times when I hit that. Just the other day I got asked for my bank passwords for a mortgage refinance. I refused and they said I could send them bank statements instead. On the other hand, if I want to access a customer's CI pipeline there's no one at Semaphore I can email to find a more-secure workaround. I have to grant access to my whole Github account. As a freelancer with a lot of clients, that's a big problem for me.