This has been an ongoing issue, albeit not with examples this egregious. If there's one thing I hope the DMA provides, it's a compelling case to Apple to more carefully review and reject scams worldwide. Every time an app like this slips through, it makes the platform worse. While some failures are expected, I really want Apple to do better than to let a direct impersonation of a password manager through.