> Yet it's putting all my credentials out on somebody's else's account.

I definitely would not put credentials into a Google Form. The results are plaintext...