This. For ordinary people, the key to security is avoiding centralized data stores for sensitive information. If someone hacks a website I use, they will only

This. For ordinary people, the key to security is avoiding centralized data stores for sensitive information. If someone hacks a website I use, they will only get that one random password. If they want to get my master password, they need to break into my home computer, in which case they'll only get access to a single person's digital life, which is probably not worth the effort. If Mossad or the NSA wants to steal my passwords, they will get them, but I'm just some random nobody, so that's not my threat model.