This is by design iirc, as a consequence of sandboxing. However there is an easy workaround, which is redirecting your browser profile back to the host with flatpak override/flatseal. I don't need this anymore for Bitwarden but I did this for a long time with Firefox + Enpass.