I haven't see this behavior yet, but that doesn't mean it isn't something benign. I think you are smart to be cautious. Looking at the other comments it sounds like some others might be having the same issue so it is probably safe to say nothing nefarious is at play. I also agree that a little more communication might have been a good idea. I have been using the Keychain Chrome extension lately for my Steem logins and I have been pretty happy with that. I am not sure if it integrates with all dapps though.