They should be "application specific", maybe even with options to choose which parts of Google Services it can access. I don't want my Digsby generated passwor

They should be "application specific", maybe even with options to choose which parts of Google Services it can access. I don't want my Digsby generated password to be able to access my email via IMAP. It's unlikely to be leaked in plain-text but it's silly to call it application specific.