Is authing the Rabbit R1 against your accounts secure? I'm not so sure

TL;DW: Rabbit website opens a virtual machine remote connection, hides chrome tab bar and window bar, wants you to enter your Discord login details when you want to connect to midjourney.