> It talks about 1 bad "feature" of specific password manager extension and then dismisses every other password manager extension without verifying if they have

> It talks about 1 bad "feature" of specific password manager extension and then dismisses every other password manager extension without verifying if they have this bad "feature" too. He specifically says: > All online password managers work in a similar way, this isn’t specific to any one implementation. And they do - because that's the integration point they have to use. It's just how the architecture of browsers works. > And this is from security expert ? Bruh Not sure what this is supposed to mean but I'll take it as dismissal. Assuming that is the case you should rethink how you assess information because Ormandy knows what he is talking about.