The fact that Keychain isn't in this list of APIs despite also being available to all apps by a developer (and optionally synced via iCloud) also points to them being OK with shared logins between apps (or they just forgot???)