How do you think Bitwarden could have handled this better? An allowlist of domains where iframe autofill is allowed, pre-populated with some vetted examples li

How do you think Bitwarden could have handled this better? An allowlist of domains where iframe autofill is allowed, pre-populated with some vetted examples like apple/icloud mentioned in the article? At what point do user options trump accessibility? I tell my parents to use Bitwarden because it's more secure than their alternative (plaintext in Google Doc) but they have no idea what an iframe is or how to spot one. If I taught them they'd never remember because it something so seldom used. Password managers are written for an audience much larger than us. Such an option as suggested would be useless to them. Maybe Bitwarden made the right choice here?