Yep agreed. I just have a small anecdote. My credentials were stolen when altoira.com was domain hijacked and setup a phishing campaign -- even when using 1Pass

Yep agreed. I just have a small anecdote. My credentials were stolen when altoira.com was domain hijacked and setup a phishing campaign -- even when using 1Password to manage my credentials. Thankfully when they restored everything and require a reset of passwords, they offered TOTP 2FA which would provide an additional defence when phishing succeeds.