[Luc]

It's not fake, it's using a standard Apple-provided API. They are not stealing your password.

As is explained in the link you provided.