2 weeks ago we released Reflect on Apple's App Store – it's been a disaster

It sounds to me like calling the encryption phrase, a "password" and presenting it as immediately after signing in with Apple is the problem.