Passwords are hashed and never stored readably. Sign-in, sign-up and password-reset requests are rate limited. Canonly reads the sources you connect and never writes to them.
Agents connected over MCP read the same trusted view you see. Anything an agent writes lands as an unapproved draft attributed to it, and it cannot approve its own work.