Can someone explain to me how it is that we accept password managers as viable solutions from a security perspective? Like, all it would take is a bad actor ins

Can someone explain to me how it is that we accept password managers as viable solutions from a security perspective? Like, all it would take is a bad actor inside 1Password to upload a compromised version of the browser extension that transmits the unencrypted password vault to a server in Siberia. That would compromise a significant fraction of the world's passwords in a matter of hours. How is that single point of failure not terrifying to anybody?