Meanwhile everyone agreed that the convenience of magic integration with browsers and other things was more critical than security, in the default config, for a

Meanwhile everyone agreed that the convenience of magic integration with browsers and other things was more critical than security, in the default config, for a password manager of all things, when debian changed the default keepassxc package to omit optional added attack surface plugins. Not unavailable, just not installed by the default. I wonder how many people that agree with this nonsense position also agreed with the keepassxc nonsense position.