Hacker News Reader

Couldn't an app screenshot the screen after asking you to authenticate, and thus capture the phrase?

AFAIK, it's not possible for a sandboxed app to take a screenshot without user consent.

There are apps (obviously they're banned in the app store) that can record the screen (not just within the app, but in general).