Yeah, that agar.io clone I've been playing needed the active key when supposedly it just needs to post a message for you in each game's thread, I asked about it and haven't received word back. That makes me uneasy, but I don't have any liquid funds so I didn't care.
I think I get what you're saying, if an independent use of the private key is happening in the first place with steeminvite then not having it connected through steemconnect is actually safer in case steeminvite itself actually gets compromised, right? Especially considering most users won't manually de-authorize it after it's no longer needed.
I've noticed that when I post on busy for example I can't see it was posted on busy, the [] is not comforting at all.
Thank you for your responses, and steeminvite was seemless when I used it, so thank you for making it in the first place and keeping us in the loop.