Application security and Core Data

Core Data is not a storage, and whatever data you store including passwords should be stored in keychain of the device.

It’s highly vulnerable If you are storing anything in Core Data cache memory.