Apple makes you do a lil proof of work before you can submit password credentials when logging in.
Apple isn’t open source, looks someome had to reverse engineer it.
Basic sketch is you call a endpoint which tells you how much PoW you need and then you submit a hash w/ that many leading zeroes any time you try to login.
Check the files changed for the implementation/scheme.