I wouldn't put too much faith in biometrics either, a real shame considering their convenience.

https://blog.kraken.com/post/11905/your-fingerprint-can-be-h...

Personally I advocate using BitWarden for commonly used logins that, if they were compromised, would not be catastrophic; perhaps in some cases because 2FA provides another, tautologically, factor, and KeePass secured with a FIDO2 device in challenge response mode, a passphrase, and possibly setting a higher key stretching work factor to further blunt any brute force attempt, in which more important data is held.