it's less reckless than other ways you might do this when you ask Rainbow to sign for you, the other app (Terminus, Quilcast, etc) never have to see your secret, they only get the signature which gets presented to the blockchain for validation so that something can get done on your behalf (in this case, creating a signer, which the client holds in custody for you)