Another flaw: deterministic password managers are inherently vulnerable to brute forcing-- it's basically like sending your password database to every site you

Another flaw: deterministic password managers are inherently vulnerable to brute forcing-- it's basically like sending your password database to every site you log into. Ideally they use a very expensive KDF, but I've seen implementations that use weak derivations like 10,000 round PBKDF2.