It will work the same way any site that lets you log in with Google/Facebook/whatever works - you get redirected to the service provider, and they pass a token back to the third party confirming your identity. GOG never sees your credentials. Steam and the rest could prevent that, but they want you to log in because they get the data on what you’re doing, and it’s another hook to keep you in their ecosystem.