Security-sensitive users should confirm whether ilha copies credentials into its own storage and whether it supports least-privilege access.