Macs have a hardware secure enclave that apps can use to store keys where other apps can't access them. Apple itself does not seem to be making adequate use of it here.