Hi there , we use steem connect (busy.org) we dont ever get or hold your passwords also we only ask for post rights so theres no way to transfer any SBD or steem from the account without the Private active key and to address the first issue over posting is not an issue because the system waits for voting power to reach 100% and we have rules set for it to follow, if you need any more info please join the steemPunks group mentioned in the post.