I would guess that it's true for many APIs which rely on the user providing their password to the 3rd party application.

Of course that's the bigger problem. The user shouldn't have to give their password out. It's somewhat ironic that Twitter doesn't implement OAuth or something similar since Blaine Cook started OAuth.