I have just changed my password using steemit.com and I appreciate every word you have spoken.
I figured that when you click on GINAbot notification, it automatically loads steeming.com instead of steemit.com
I use GINAbot to keep a tab on my favourite steemians. I will have to look for a way around this cos like you rightly said, it's better safe than sorry.