What does spyware mean in this context? Some phishing-like cover websites prompting users to input their credentials of openai? Apart from that, I thought Apple handled permission handling well?