I'm not sure this is a problem exclusively with steemit and it's source code. It's the same risk as someone running a fake store online or performing a phishing attack. This kind of stuff happens all the time! Peoples credit cards, user credentials and personal information gets stolen all the time.

This isn't a problem with steemit alone, this is a problem with the internet itself. Vigilance on the part of the user is the solution here.