IMHO paying for password storage solutions is the best way to get security. A robust solution will need updates, fixes, and improvements. The team building those will be paid somehow. Paying customers assure that ad networks and other nefarious actors cannot incentivize weak security practices.
Sure. We could all evangelize some esoteric command line FOSS system, but the general public NEEDS secure password management