That said, I'd never EVER participate in something that required a private key. There are many other ways to do this including signed messages.

This is why I've still never claimed my peerplays-bitshares airdrop -- the official way to claim is to enter your BTS owner key in the peerplays client. Utter madness!