Indeed. And it's not just about spying. The Zapier people are probably decent and honest etc, however that's not the point. It introduces a new security threat

Indeed. And it's not just about spying. The Zapier people are probably decent and honest etc, however that's not the point. It introduces a new security threat and attack vectors unnecessarily It violates the principle of needing just enough access, to perform a task.