someone untrusted can even steal the coins if he is able to crack the password , so it would be wise to use known services only.