Better than having then unencrypted (unless you set a passphrase) on the filesystem for every rogue process to grab. The issue with password managers is the key

Better than having then unencrypted (unless you set a passphrase) on the filesystem for every rogue process to grab. The issue with password managers is the key is then most likely still accessible from other processes while the password manager is unlocked. On linux for example by poking around in /dev/mem or /dev/kmem. There are way that help with that like memfd_secret. A secure enclave or similar side processor avoids this issue by running within its own isolated memory and this processor also handles all key operations, so the key never enters the main memory.