On top of this keychain stores logins by domain. Even if an app is in a different developer’s container you can retrieve the credentials with just a couple taps.