That doesn’t prevent them from being open & honest about what caused a security incident and what they’ve since done to ensure they’re highly secure. Furthermo

That doesn’t prevent them from being open & honest about what caused a security incident and what they’ve since done to ensure they’re highly secure. Furthermore, I’d argue that Firefox & chrome password managers probably have several orders of magnitude more passwords stored (and therefore much more highly targeted), yet they don’t seem to have annual security incidents. And you can’t even pay for those products. People stealing passwords are probably doing it to eventually make money. Criminals could save themselves a ton of work by just directly hacking the banks, yet we don’t hear about highly regular complete compromises there. Furthermore, if operating a password manager service puts a huge kick-me sign on your service, why don’t the other password managers have plenty of incidents?