DTube only asks for your posting key. So let's say I'm hackerman and want to steal your coins, I can't. All I would be able to do is upvote myself, and apparently I don't need that, everybody already upvoted me :DD

I agree with the 7 days payment window, it is bad but it is a STEEM constraint