Did you just nab my admin password?

Quick question. After installing this plugin, I hopped on to the settings page and found the Mandril API Settings form was pre-populated with my WordPress Username and Password, as noted in this screenshot:

http://pasteboard.co/YntQ0NP.jpg

Still working on my morning coffee, I thought nothing of it and clicked “Test Credentials”.

Do you now have my username and password?

https://wordpress.org/plugins/mailpoet-wysija-mandrill-spam-and-bounce-cleaner/