[jmuguy]

They ought to at least understand that Stripe Connect and OAuth can be used rather than literally giving them your API keys.

[yashmaistry]

Stripe Connect & OAuth was something we thought about. It's definitely recognised as a more secure method and it's also low friction to integrate.

The only drawback comes into play with marketplace and platform apps. The platform itself may already be using OAuth with their customer.

We could offer our customers both options and let them choose which one is best.