A posting key can be reset at any time with the master.

DTube never got hacked this way, because my github account is way more secure than all servers setup by apps using auth of users