The "attack surface" I worry about is forgetting to lock my screen before going down the hall to get some water, and someone slipping in to obtain a sensitive financial password.

I've never succeeded in explaining this to any password manager's tech support. They stay in business because their tools are convenient to use.

I've migrated from 1Password to a Dashlane family plan. I use two separate accounts for myself. I log in to one account to access sensitive financial sites, and log out explicitly before leaving my chair. I log into another account for everything else; do I care if my subscription to the Washington Post gets compromised? That account stays open for convenience.

Each password manager has a theory on how best to offer similar security/convenience with one account. None work as smoothly as having two accounts.