Security flaws in iOS and OS X allow keychain, browser, and app password theft, reported to Apple in October 2014, no fix yet [www.theregister.co.uk]
Welp!