And relying on (another) 3rd party provider that indirectly has access to your code….

I do not how it is implemented, but if I can press ‘continue’ from my phone, someone else could enter other commands… Like export database…