Password managers don't have a single point of failure: an attacker needs both your password and the state of the password manager.