I believe it's demonstrating accessibility attacks (though, I don't have the audio myself so I could be wrong). In the first case it looks like the password text field is blocked so accessibility is used to grab the code while the user types it in, in the second a two-factor code is pulled from the Authenticator app, and in the last the phone's passcode is recorded as the user types it in?
Edit: watched the video of the talk linked above; the above descriptions seem to be accurate
Edit: watched the video of the talk linked above; the above descriptions seem to be accurate