I don't know if someone already had asked it here, isn't connecting our exchange account a very threat to our funds?
You bind API keys from your account, not account credential itself.
In API keys config you can choose that *this* key isn't able to withdraw funds, it can only trade.