If passwords are synced between devices, they are presumably being stored on MS servers.
To just give one example, if typed passwords are sent them passwords typed into Chrome are sent, if only the password manager is synced then that only impacts IE or Edge users.