it used to be called a piggyback, its still the same mechanics except a malignant phone app does the spotting, while an AI does quick draw mcgraw, and uses the credentials before you can click the sign me in button.
disable phone cameras or keep it pointed in a safe direction, stop assuming that compromising peoples passwords just because you[MS] think its a non issue.