All authentications will be handle by extension across all web apps without exposing your keys anywhere and you will still have all the traditional login methods offered by specific app.

This seems like a right approach for now. 🤔