Sort:  

You don't have to hand over every password. You can actually log in with only your active and posting key, if you don't trust the dev, good-karma.