Hacker News Reader

You could give a one-use password and then revoke access to the app once you're done transferring.

Didn't test that but I don't see a reason why it shouldn't work. Thanks for the heads up!