Any extension based PM has potential risks. Bitwarden had multiple vulnerabilities reported in bug bounty and there are likely to be more.

The most secure solution is a local PM.