they are also doing some ... questionable ... trickery in their on-premises install <https://news.ycombinator.com/item?id=31098608>, so aside from vaultwarden being seemingly infinitely slimmer, it's also a lot easier to reason about from a security PoV