Comment by kerny

Any third party code can just read your credentials file and POST it to remote server.