[atoav]

Exactly. This should be used with care on remote hosts that are untrusted.

But for local development it is still superior to not having a password at all.

[vindex10]

for local development, I use keychain [1] on top of the ssh-agent.

this allows to keep ssh-agent On for a limited time, so it will ask for password again in, for example, 10 minutes.

[1] https://www.funtoo.org/Funtoo:Keychain