Код-ревью: хранение сессии и вход (Swift)

enum Secrets {
    static let paymentApiKey = "sk_live_51H8xQ2"
}

final class AuthService {
    func login(email: String, password: String) async throws {
        let session = try await api.login(email: email, password: password)
        UserDefaults.standard.set(session.refreshToken, forKey: "refresh")
        UserDefaults.standard.set(password, forKey: "password")
        print("Logged in: \(email), token: \(session.accessToken)")
    }

    func unlockWithFaceID() async -> Bool {
        let ok = (try? await LAContext().evaluatePolicy(.deviceOwnerAuthenticationWithBiometrics, localizedReason: "Вход")) ?? false
        if ok { isLoggedIn = true }
        return ok
    }
}