AutofillProgressDialogControllerImpl::OnDismissed UAF (macOS)

Preconditions (victim's macOS Chrome):

• macOS, no Touch ID / Apple Watch unlock available (LAPolicyDeviceOwnerAuthenticationWithBiometricsOrWatch unavailable).
• Signed in with at least one masked server card / virtual card in Google Pay.
• chrome://settings/payments → "Verify it's you when paying" (mandatory reauth) is ON.