The last time I checked, Bitwarden would fill a password into an iframe even if the iframe is for a different domain than the parent. This came up in one of the

The last time I checked, Bitwarden would fill a password into an iframe even if the iframe is for a different domain than the parent. This came up in one of their security audits and changing it was argued against. This has security implications and what cautioned me against it. Other password managers don't do this and look at iframe domains before filling them in. Am I missing something?