Yup. If we need ftp access to a client's account we'll first try to use cpanel file manager... and if that doesn't work (usually works fine), then we'll ask the client to supply their password as a "security confirmation".
They appreciate our extra security, and we get the password. We both win!
