I use Chrome Remote Desktop to access my home PC. Normally this is done from my own laptop but on two recent occasions I have had to connect from clients' PCs.

This has required me to sign into my Google account in Chrome on their PCs.

I have found in both instances that their stored passwords have been added to my stored passwords list in my Google account and I can easily log into sites with their credentials. 

This is a major securtity flaw!