haha, yah there's a deal of trust in managing systems like this. Luckily they can also check the passwords themselves, but I try to teach them not to input their master password into websites that aren't on the bitwarden domain.

I use the website directly https://haveibeenpwned.com/Passwords