I got a security notice from my broker this past week warning people not to divulge their login information to third parties. They made the point that these third parties then have the same access as you do. Also, they apparently store your login information and if they are hacked, your login information is included in the data breach. I just sent a photo of my last statement with the account number redacted and that worked fine.