They're basically saying: a) you are safer with a password manager than without, in general, despite it not providing any additional security for this particula

They're basically saying: a) you are safer with a password manager than without, in general, despite it not providing any additional security for this particular attack; it is also not any more vulnerable. having a password manager doesn't make you more likely to be caught by this attack (because the last thing they want to do is accidentally convince people to stop using them, in favor of 'newpassword2') b) you are safer yet if you turn off automatic autofill and instead use a hotkey or some other form of user interaction