> If the model is based on generating a secure (in terms of entropy) token that is then stored on the device or in the iOS cloud it's fine. That's about a like

> If the model is based on generating a secure (in terms of entropy) token that is then stored on the device or in the iOS cloud it's fine. That's about a likely to happen on your phone as any given website is to have secure password handling, eh?