> A malicious app can already phish you by impersonating another app. Yes but that requires a host of other things to go wrong first. My point is basically "D

> A malicious app can already phish you by impersonating another app. Yes but that requires a host of other things to go wrong first. My point is basically "Don't enter your credentials into any app". There might be exceptions for 1st party apps but these are much less common and the OS already has protections in place (of varying levels of effectiveness).