You're very off base on the steemconnect rant. It's basically a tool sponsored by steemit inc. The idea is that you only ever trust steemconnect and if you trust that tool, you won't have to worry about every website requiring you to login and be able to empty your wallet. The active key permissions are required for the tool to work, but everything stays client side in your browser and the website you're logging into doesn't have the ability to get your key or anything.
RE: Bits and Pieces - Trading the Alps and Grand Canyon