Careful everyone.
It's still possible to exfiltrate money from your account using API keys by moving money between accounts via low liquidity trading pairs.
hey thanks for commenting. Why would I use API anyway? Why should I trust him? IMHO He would need to trust me if I invest my money
You give him access to your API keys so that he can trade with your account. As opposed to sending him the money directly.
Parodium simply states that that gives a false sense of security, since OP can either A. still make shitty trades losing all your money or B. try to siphon away your money through low liquidity coins:
(He buys LL coins with your account, then sells them for as low as possible, causing his buy orders which are way below market rates to fill, thus making some profit off of your coins once they shoot back up. (Or vice versa)).
IMHO He would need to trust me if I invest my money
How exactly? He isn't taking any risk by using your money to make some trades?