I prefer self-hosted and hardware password managers. This does not completely mitigate the risk, but makes the attack surface smaller. Another question is your local network perimeter protection. I don't feel safe even with reverse proxy like tailscale, and thinking about local LLM Agent based network safety monitor.