As long as your device is not jailbroken you are right, only apps with the same Bundle Seed ID have access.
If you jailbreak your device you loose all security features and apps that did not went through review and automatic checks at apple can use internal functions to receive any data stored in the keychain.