Having reduced threat vector is sometime better that having multiple threat vectors spread all across. You can make the same argument for VPN server. Apart of l

Having reduced threat vector is sometime better that having multiple threat vectors spread all across. You can make the same argument for VPN server. Apart of lastpass hack, I cannot think of any other password manager hacks that have lead to password being compromised. I absolutely agree that in an enterprise setting there has to be another layer of security on password managers. But with password managers, credential usage and sharing becomes seamless that can lead to less leakage.