It's not. I use Spotify OAuth, and you never share your login/password