I have noticed that one can use same application specific password for both imap and smtp. I think this goes against the principle of having app specific passwords and might be anti-security feature. Why is that so?

Regards,
Sudhir Khanger,
sudhirkhanger.com.