Yeah good point. It would be nice if Steemit offered OAuth and an API at some point so that 3rd party apps don't actually need the user's real keys, but instead get a revokable access token. There would

This seems like it could become a big problem as the steem app ecosystem expands. Something in one app context (or community) may seem low quality, but actually be quite good in a different context.