"link" to me implies something along the lines of a FB/Google/GitHub OAuth login, not that they steal my credentials.

I guess technically they just say, "you will be prompted to enter the username and password associated with those accounts" and don't specify that they (Plaid) will be using your credentials, but I don't think it's clear enough that you are giving your credentials away!