> you can also derive all other devices' pairwise session keys from the password hash as well, i.e. intercept their traffic.
Note that deriving keys in a passive fashion only works with WPA2. With WPA3 SAE you must do an active Man in the Middle attack, which means also that you need to possess the key at the time of the handshake. With WPA2 you can decrypt any historic traffic you have recorded.
> share Wi-Fi password with nearby devices
You dislike this feature? It’s pretty amazing compared to explaining which letters are uppercase and what an ‘&’ is called.
Apple password sharing is definitely annoying. I mainly use Apple stuff including iCloud for password management. Surprisingly, it even works well enough on chrome for windows. It doesn’t work for the 10 game launchers I’m forced to use, but it’s not a huge inconvenience, I can just grab those from my iPhone. But I cannot grab wifi passwords from my iPhone, that can only done in keychain in MacOS.
On iOS 16 (and possibly earlier), it's finally possible to view passwords!
On exception are those originally received via nearby sharing, potentially also those afterwards synced to other devices via Keychain, as the iPhone does not have the preimage to display.
The only thing you can't get from the hash (without reversing it) is the password itself, so if you use the same high-entropy one for a different SSID (but why would you?), it helps a bit in that specific scenario.
Apple has annoyingly decided to share the password hash using the "share Wi-Fi password with nearby devices" at least in some versions, which makes it impossible to actually manually copy-paste over a password received in such a way. I consider that pretty poor security-by-obscurity as well.
If you need your network to be resilient against such attacks, you need WPA-EAP ("enterprise"). PSK was never designed for that threat model. That said, it's a shame WPA-EAP is as complicated to set up and poorly supported by most routers as it is.