The concept of ethereum makes transferring of coins and token an easy task.
With API's and smart contract, 3rd party app can receive coins in just a matter of click.
So, users should be aware of what they are using and try not to use the private key as much as possible.