This could more easily be avoided if the programmers of Steem.it would use a separate window for the private key . . . And maybe a great big warning on the page.