> All competent #1 cloud-based password managers are like that.

If you say so...

Sadly there could potentially also be a supply chain attack that happens to make its way into the client you use to view your supposedly secure vault. Odds are they use npm, btw.