@chaotichuman.bsky.social OAuth doesn’t steal your main password, you log in with the password to your PDS and Clearsky gets a kind of access token only in return, not the password