In hosted groups/sites, the 3rd party signin process mentions Shapado rather than the hosted domain/site name – this makes users nervous.

It would be worth while having a clear declaration that the host site (Shapado, etc.) obtains no permissions, when a hosted group signs a user in using any of the 3rd party sign-in providers.