The login / init phase could be made more secure by copying the ESO login approach:
https://github.com/astropy/astroquery/blob/master/astroquery/eso/core.py#L110

This could be done later, but @agroener let me know if you think it would be a good idea.