Thank you for this educative and comprehensive tutorial @fadrian.
It should be added that, currently, SteemConnect is the only way to authenticate without entering your private key on smartphones, as Chrome extensions are not supported on mainstream Android browsers.