I agree with all these points completely, and I'd like to extend a bit more: * The criticism of cloud-based storage isn't really valid. Any decent password man

I agree with all these points completely, and I'd like to extend a bit more: * The criticism of cloud-based storage isn't really valid. Any decent password manager should only sync the encrypted data, and never move anything unencrypted. * Browser integration isn't obligatory. Lots of PM's don't use that, and lots of users are okay with that, so that attack surface isn't an intrinsic part of a classic password manager.