>And to this day anyone can spoof the system password dialog and steal the system password
TouchID solves this in a sense.
Make it look like the TouchID isn't working and switch to password mode, boom. User password obtained
Make it look like the TouchID isn't working and switch to password mode, boom. User password obtained