I think this is a very difficult dilemma for the community. Whether to promote SteemConnect as the best way to integrate 3rd party apps or trust users to handle their own key security appropriately. I really see both sides of this.
I wonder what storage overhead (as percentage) it would add to include which account with posting authority actually initiated the blockchain transaction?