On one side of the equation I'm concerned that mint is holding these credentials somewhere, on the other side I'm more concerned that the only thing between someone and all of my financial data is a simple user name and password. No attempt at RBA or out of band/multi-factor authentication to get into my mint account.