(Placeholder)
Only install what you trust: downloading via the app is no safer than downloading from a game creator's website directly.
Lack of 2FA in login flow is known, but not a huge deal since API keys are very scope-limited. Will solve both in time.