Why? A password manager's web site would be a natural place I'd expect people to fall prey to self-xss attacks. That they had such a warning there feels appropr

Why? A password manager's web site would be a natural place I'd expect people to fall prey to self-xss attacks. That they had such a warning there feels appropriate, and likely to be the result of actual attacks against users that they'd seen.