If I remember correctly, people at the time were suggesting Apple simply had their own, private version of the popup which indicated it's authenticity via colors or a badge. I honestly feel like that might have been good enough, especially if you change the other, public popup dialogs to warn not to enter password information.