I actually do. I don't use their app, only the website. Their JS files are served from my own webserver so I do know their content. Besides, nothing stops someone super-paranoid to check the JS code upon login before they put their password in.