It would be nice if mbsync could get passwords from .netrc file like most other programs(msmtp, fetchmail, offlineimap, etc)
This way user shouldn't save password directly in mbsync config, instead all passwords stored in one place.
And user can safely add mbsync config in his config version control repository, because password is in separate file.
i just committed support for a generic PassCmd option, together with a configuration example that demonstrates how to extract passwords from .netrc. that's not as straight-forward as reading .netrc directly, so i'm still considering the request, but i need to be convinced (by popularity vote).
nobody appears to be interested in convincing me ... ;)