iOS 11, 12, and later offer an autofill function from the iOS keyboard for specific apps enabled for the function. I have read Apple's documentation and it appears that the passwords are stored in the app and then recalled to the keyboard UI where they can be selected to autofill the appropriate field in the displayed app form. I am not sure if this is true for browser login pages, too. Generally, autofill functions have contained vulnerabilities in the past. But, what are the vulnerabilities of Apple's iOS autofill approach?