Browser extensions are usually the attack vector for password managers.

I use the native desktop apps for them, previously LastPass and currently Bitwarden. The UX suffers a bit but you at least you gain some security.