Considering live trading requires our actual credentials rather than API keys, how secure is the storage and handling? Does it in fact breach the T&Cs by handing out the credentials to a third-party (QC)? I believe IB doesn't allow that.

Do we live trade on QC at our own risk?