Hacker News Reader

They already have all passwords... They are conveniently backed up on android devices. They have the cleartext.

(as do apple btw.)

Apple's WiFi password sharing system uses iCloud Keychain, which is end-to-end encrypted [1]

As long as Apple can run arbitrary code on your device, protocols do not matter.