APPS can be compromised. This is the way all email clients are going. Google has already done it years ago but has a method to "Allow Less Secure Apps" so you don't need to do this. The reason it's more secure is because in the APP you do NOT need ...
