A new report shows how a malicious app can replace an authentic one and bypass macOS's security. But it requires access that ...