That’s a good point, thanks for explaining. Something I try to remember is that you not only have to trust the company who’s managing your data, but you also have to trust them to protect it from bad actors.
I’m trusting Bitwarden for now, but eventually I’d like to move to a self-hosted option like Vaultwarden. I think that’s the best way to go if you’re confident in administering it.