I know the for-profit password management companies want you to think you have to store everything in one vault (with names like LastPass, 1Password, etc.), but

I know the for-profit password management companies want you to think you have to store everything in one vault (with names like LastPass, 1Password, etc.), but why does it seem like everyone falls for it? Personally, I store plenty of passwords in the browser, but they're all the passwords I care very little about. Things like e-commerce (where the CC isn't stored), forums, etc., where the password falling into the wrong hands would be annoying, but hardly life changing. For the accounts I really care about, they go in KeePass (backed up to cloud), but with a strong master password and keyfile protected by admin-only access in Windows. Yes, it's way more of a pain to 'sudo' KeePass and copy-paste passwords than use auto-fill, but I'm only logging into my bank accounts and stuff occasionally. If I managed large crypto wallets, those secrets would probably see their KeePass DB get another layer of security: air gap or similar. No way would I comingle those with my Grubhub password that I couldn't care less about.