Yes, I agree with you. I had that concern at first. But if you really think about it, it would be hard for them to monitor all the passwords because its a script that logs in for you. I'm not saying they wouldn't do it, but there would be no reason for them to want to steal the passwords or do anything with them. But of course, that's your decision. It's a great alternative if your work/school blocks FTP