“I often say that “use a password manager” is bad advice.”
The simple offline ones like KeePass are fine. The trouble starts with browser integration and cloud sync, where subscription money attracted vendors who cannot build safe IPC. Reviewers grade onboarding and never test the security claims. Telling people to use any password manager is like telling them to take any pill in the cabinet.