It is like the equivalent of posting a bitcoin wallet seed phrase in locations accessible to others.

You're trusting the devs, or the third party services they use, to not rug you.

There are signers you can use. Amber is one of them. It is an open source signing app that stores your info on your local device.