One of these weeks... we might get around to find time to use steemconnect, but It is just a posting key, and we do take good care of them. But I do agree with you to be careful with sending private keys.
Our bot is open source and can be downloaded and used in private also, so you have an option there. The bot we use is called "Lucky Luke rb" by @inertia.
If you want to change your keys, just generate a new steem password.
Yeah sorry it isn't about the bot code it's about teaching minnows and uninformed users it's ok and suggested to send private keys thru Google docs.
And better yet, seems their key comes back in their email cause they likely hit the box to receive their replies in email. This is a bad situation all around.
Just weird to see whales encouraging such behavior with such nonchalance.