This is a concern several people has voiced, and it's not yet decided if it will become a native-app or a web-based client that was my first thought. There are two camps basically: people who would hesitate to give their credentials to an unknown server and would want a native-app and people who don't care about that and would prefer a webmail client.