Hey Philip,
I also don't like the fact that when it has an error connecting it shows the password to the ftp download site 🙁 🙁
Right, that's why there's a separate download and upload site. You upload to a location on your servers that can then be accessed by a read-only server (like a read-only FTP account, HTTP server, or HTTPS server).
Does that make sense?