yes and no. There's malware out there that can get credentials from browser password stores. So, I agree that an external password manager introduces an additio

yes and no. There's malware out there that can get credentials from browser password stores. So, I agree that an external password manager introduces an additional attack surface, but it partially removes one as well.