True, but password managers can potentially reduce the risk of phishing, since they're the ones autofilling. There's probably work that would improve the UX here but even still.

Of course, it's not nearly as good as being totally phishing resistant like U2F, but IMO it's a big enough win that we should still be pushing password managers very hard.