Good post. Thanks for raising awareness on protecting our Steemit account. We should only consider sharing our posting keys with thoroughly vetted third party sources. As you stated, posting keys do not allow access to money but unauthorized and malicious activity by unscrupulous actors could have ruinous results.