Those that don't trust the tool move their mail themselves I guess.

Things will probably get better as more providers have support for OAUTH2.

But still you allow someone else to see your mail.

Best case is that the destination provider have support for the migration such that you can import directly in your new mail.

Or IMAP support inside the browser!