That's not a fair comparison. The differences in LP and 1P encryption approaches have been well known for years, and they are fundamentally different.

Now, while 1P encrypted vaults are not brute-forceable the way LP's are, that doesn't mean it's impossible to hack 1P (e.g. malicious code injection in any of their apps or plugins), but I don't like the "everything turns out to be a false promise" broad-brushing when there are real and verifiable differences in how these companies secure your data.

Unless you want to spend the time doing RE of crypto (so fun!), how to do you even know who works for 1Password?

Are you waiting for Snowden 2.0 to explain how things work a decade later?