Yup. And they are, technically, because if someone has that one login and password, they can access all your accounts. But it turns out that keeping that 1 lo

Yup. And they are, technically, because if someone has that one login and password, they can access all your accounts. But it turns out that keeping that 1 login and password in your head and trusting the rest to your password service (especially if you let it make random passwords) is way more secure than what people do if they have to try to keep them all in their head. So it's about relative security. Both sides are correct, in their narrow views of the situation.