The MASVS states in section "V6: Platform Interaction Requirements" MSTG-PLATFORM-11:
Verify that the app prevents usage of custom third-party keyboards whenever sensitive data is entered.
There are no references for test cases or similar and when I am thinking of Android it seems impossible, to force this behaviour. In my understanding, no third party keyboards should be permitted, when entering something like a password. That means, that when under Android you have a third party keyboard installed (Google Keyboard, SwiftKey, ...) every app fails this test.
How to you deal with this test case? When does an app pass / fail this test?