That could be another way to do it for sure. I went this direction for my own needs really, I didn't want to have to spend time manually managing the ID strings

That could be another way to do it for sure. I went this direction for my own needs really, I didn't want to have to spend time manually managing the ID strings/engine names and Puppeteer login seemed like a good fit. Since I run it locally, it feels pretty safe for me at the moment. I definitely get the concern though. For what it's worth, the Puppeteer session is cached so you could technically remove your credentials after the initial login and re-enter them any time it expires.