I know that this isn't what you asked for but one way to dramatically reduce the attack surface is to not upload your passwords anywhere and not sync them between devices.

Just keep the passwords on your phone (in a password manager) and type them by hand on your computer. It works well enough since you always keep your phone with you (at least I do).