I often get third party popups from software vendors which asks me for my MacOS password. I have checked several times and these are "legit" (as in, the popup comes from a who it says it does and it's a reputable company). It's wild to me that Apple have painted themselves into a world where it's expected that users give their OS password to third party apps.