[gguruusa]

*sigh*

You clearly don't understand how authentication is performed. Not to say that it's perfect, because it isn't, but the general strategy is to encrypt your username/password, and compare that encrypted value to the encrypted value on the host system. The encryption is a one way process...that's why your original password can't be "provided" when you lose it. Furthermore, access to sensitive information, even though it's encrypted, is limited to as few people as possible - further limiting theft possibilities.

Username and password management is YOUR responsibility. The argument you supplied applies to every system you provide a username and password to. If you don't like someone potentially stealing your info and applying it to another machine, then don't use the same info on multiple machines. That's is fundamental security practice. Failure to properly manage your username and password combinations is not anyones fault but your own.

The bottom line: don't use it if you think it's unsafe.