That's why I chose JS and to distribute it as ready-to-run app with app.js. Everyone should check the code and make sure I am not doing nasty things with their passwords.
You could give a one-use password and then revoke access to the app once you're done transferring.
Didn't test that but I don't see a reason why it shouldn't work. Thanks for the heads up!