Security updates like this are somewhat frustrating (disclaimer: I am a fan of full disclosure, at least after the exploit is patched). If it is able to somehow

Security updates like this are somewhat frustrating (disclaimer: I am a fan of full disclosure, at least after the exploit is patched). If it is able to somehow glean your Twitter password from you clicking on the link, that is a serious security risk. If users voluntarily enter their username and password, there's hardly anything one can do about it, except warn users not to enter such sensitive information haphazardly. However, I don't understand how a strong password would help in either case. Perhaps I'm overlooking another fairly obvious scenario.