Your iOS devices have a list of accepted connections it's allowed to reveal data to. When you connect your device to something that isn't on the list, it'll pop up a message that says "Trust This Computer? - Your settings and data will be accessible from this computer when connected."
This can get pretty annoying if you're like me and connect your device to something like a TV that it won't register and continue to ask you to trust it. But at the same time, that would be just proof that it's working and won't allow assigning to generic hardware that won't communicate with it like computers do.
If you have an established trust with a computer, it will let you access the device without having to input your password. If you don't, it won't let the computer access the data at all. It'll of course tell the computer that it's an iOS device, but a device browser like iMazing will ask you to accept the trust message in order to show you the data.
As for app security itself.... Apple recently changed how much access one can get into an app. You used to be able to see the GUI elements in the main folder, and now you only get a small list of folders - Documents, Library, StoreKit, tmp, and most of them you can't do anything with because they're read-only.
Personally... I have my private stuff in a password manager. It is the only place where I'd put such things, it's the only type of app that you don't feel like switching for something else all the time either. You might not have a need for something as robust as Documents, but you might forget about the security aspect about it and try something else that doesn't have it, and that's when you're most likely to be vulnerable to stealing.
|