I hope you won't consider this spam, but I wrote an article this morning that kind of ties in.
With all of the decentralized apps being developed for Steem, it begs the question - how do we trust the app developers with the ability to take actions with our accounts. I use the example of @xeroc's Streemian site, seeming how a user like @xeroc is about as trusted of an app developer as there can be. If you have time to check it out, I would be curious as to your thoughts.
Steem Tools Development - Centralized Steemit.com vs. Decentralized App Center (Security Concerns)