Neither - it's a real tool with honest documentation. We could have hidden the credential flow like other projects do. Instead we documented exactly how it work

Neither - it's a real tool with honest documentation. We could have hidden the credential flow like other projects do. Instead we documented exactly how it works so users can make informed decisions. The "temporary access" framing is accurate: Robinhood returns tokens that expire, we hold them in memory (not disk), and they're wiped on logout or server restart.