Apple Passwords app was vulnerable to phishing attacks for 3 months after launch