Security and trust come first—especially for 501(c)(3) organizations, fiscal sponsors, and donor data. Connections use industry-standard secure sign-in and token-based access where applicable; sensitive keys aren't something you paste into random forms without protection. Pair this answer on your site with your Trust / Security page (encryption, access controls, who can see what) so donors, boards, and auditors see one consistent story.