They're both on my phone anyway, so I don't really see the difference? Whether it's in one app or spilt across two apps makes no difference if there's no extra layers between. Having it all in Passwords is better in that regard, since it requires you to use Face ID to open the app.