With a local password manager such as KeepassXC, I avoid storing my password database on an untrusted cloud computing platform, or server colo’d somewhere under potentially dubious security. I only have to worry about securing the endpoints that have a copy of the password database, and the software itself.

KeepassXC is vulnerable to leaking my unlocked database if my endpoints become compromised. If my browser or computer is compromised, how would your password manager protect against that? Does it offer any meaningful improvement to the issue of compromised end user devices?