In the world of security there is always a chance, which is why one plans for least permission and layered security. I'll speculate the https traffic between your domain, juiced and quickbase is as secure as the rest of the Internet. To ensure best practice, each add wants to use separate tokens for each customer and there is a documented and regularily scheduled refresh on those tokens... but that is a question for your add on provider.
------------------------------
Jim Harrison
transparency = knowledge + understanding : The Scrum Dudes
------------------------------
