I think they do use "donated" credentials in the background, but the article makes it sound like people would be phished into handing over their logins, which i

I think they do use "donated" credentials in the background, but the article makes it sound like people would be phished into handing over their logins, which is not the case at all.