Agreed. I am so trained by macOS that it needs my iCloud password or account password randomly that I don’t even think about it anymore. I like to consider myself a savvy computer user, but I frankly only give myself a 50% chance at best of identifying a malicious password prompt at this point.