You don't need to trust them. I use "pass" (https://www.passwordstore.org https://www.passwordstore.org), a simple CLI password manager that operates using a GP

You don't need to trust them. I use "pass" (https://www.passwordstore.org https://www.passwordstore.org), a simple CLI password manager that operates using a GPG key you control (which I have on a Yubikey). Then, you can upload the GPG-encrypted password store wherever your want in order to sync-up your passwords.