fn take_pin(typed: String) -> Option<Password>Expand description
The PIN as typed, taken into Sequoia’s protected memory, and the plain copy wiped (review of 23 October 2026, F3); empty, none. The copies QML and Qt made before (the field’s text, the QString) are theirs: QML’s string is emptied at once, the QString freed by Qt, neither can be overwritten.