Access permissions are orthogonal to having a file system. In fact, mobile apps still use the local file system, they just hide it from the user. And password f

Access permissions are orthogonal to having a file system. In fact, mobile apps still use the local file system, they just hide it from the user. And password files should still be encrypted with a master key, e.g. application-private secure enclave key where available.