[krackers]

>And to this day anyone can spoof the system password dialog and steal the system password

TouchID solves this in a sense.

[airstrike]

Make it look like the TouchID isn't working and switch to password mode, boom. User password obtained