They also hire firms for regular security assessments (I did one of them) and publish the reports: https://support.1password.com/security-assessments/