Good question. I keep mine in notes (under a not easily recognized heading) and have locked the phone. But, I would like an even more secure way to keep passwords for which most of us have many many. And, of course, Find My Phone also allows a remote wipe out of everything.
It would be nice to have a secure app dedicated to passwords.