What caused me to not consider Bitwarden was the way it handled iframes. It could send the parent sites credentials to an iframe even if the iframe was on a different domain. This is a big no-no in my book.

This was a discovery in a security review they did and choose not to change.

This was some time ago so things may have changed. But, that red flag kept me away.