we eagerly look forward to what you think and also what others say about security as well.

I'll say quickly that we depend on SteemConenct for primary security and there is no worry about @SteemPeak getting keys however features like scheduled posts do make it so we have delayed posting authority so we can schedule those drafts.

Also i'd like to point out there is a work around with steemconnect to log in with the posting key
https://steempeak.com/steempeak/@steempeak/using-a-posting-key-on-steempeak-com-a-steempeak-video-tutorial

We will try to always opt for the safest feasible option out there. And we recommend people make it a practice to try to always use posting key as much as possible. (Which btw i think you can only get using the interface steemit.com. haha)