The post doesn't say you should give out your login. It says you should encrypt your access tokens and explains some security implications of current implementa

The post doesn't say you should give out your login. It says you should encrypt your access tokens and explains some security implications of current implementations that use them, like how they often give too broad permissions. When you change your password, you often need to reauth all of your devices, but you don't need to reauth your access tokens.