I think his concern is not about a bug tweeting private contents, but any kind of exploitable bug that might give access to his account in any way, form or duration.

There's probably no way around this, since any addition is a possible attack vector.