[sparky]

A valid concern. This prompted them to implement oAuth for GMail, as described here http://techcrunch.com/2010/03/06/gmail-imap-etacts/ and discussed here http://news.ycombinator.com/item?id=1172211 .