That sounds awful, but all you need to do is add all the legitimate domains to your chase login record, then you are phish-proof. Obviously autofill itself can

That sounds awful, but all you need to do is add all the legitimate domains to your chase login record, then you are phish-proof. Obviously autofill itself can break on complex page layouts, and that's fine. The security comes from the password manager doing domain matching and offering to fill the password when you click on its addon menu.