Use a private email link or your passkey. There is no password to remember, reuse, or leak.
Wish lists stay private. Giver activity is kept out of recipient views, account exports, page source, and analytics.