you are right, I will have to make a post about this too, as currently we only have 2 trusted mobile Dapps on steem blockchain, which is wherein.io and @playsteemit and for web front end/UI like steemit.com, nutbox.io and steemcoinpan.com. User should not use other Dapps that is not mention in this list as we cannot guarantee that it will be safe for them. As for other tools Dapps it is recommended to only use them if needed.