Yeah. I think the key thing in my vulnerability is that it abused a legitimate OS prompt and had the consequences of that prompt be applied to something separate from what the prompt text itself said it would.

I just told you how… it would show your special icon or phrase inside so you’d confirm it before you typed anything.

The phrase would be managed through a system screen, like a login screen

Problem is most users will not care or understand it. Someone will spoof the dialog without the special icon or phrase and users would still enter the password.

Banks did this years ago, but a few surveys showed nobody actually checked for their key phrase or image.