Why wouldn't FB et al be using the keychain to store this? The problem with the "once they have physical access" argument is that it is easy to be in a situati

Why wouldn't FB et al be using the keychain to store this? The problem with the "once they have physical access" argument is that it is easy to be in a situation where you don't think you are giving up physical access. Imagine a rogue coffee shop that builds a bunch of iOS chargers using Raspberry Pi machines that just look like cheap chargers. Note that this is as much an Apple problem as a FB problem. FB should not be storing tokens outside the keychain. Apple should allow (require?) devices to have a shared key before accepting data connections (similar to the number that pops up for synching the old AppleTV).