If your login credentials for SigFig are ever stolen for any reason, you do not need to worry. No transactions or changes can be made to linked brokerage accounts. Also, the username/password for the brokerage itself and is visible nowhere on the site. It is kept encrypted on our servers at all times.
If you are concerned that someone may have access to your account, you can change your password by following the instructions here.