Hard disagree. The problem with Lastpass being pwned was Lastpass being Lastpass. Put your passwords in a password manager, don't put your passwords on the internet in The Cloud™.

> You're overestimating people's ability to create strong master password and the efforts needed in cracking a password.

Okay - so we're establishing that many people use insecure passwords. Password managers mitigate this risk completely by generating incredibly secure passwords - however, people may use an insecure master password.

> I'd rather be very specific in suggesting password managers, use them only for non-critical services.

And your proposed solution is for people to use NO secure passwords, but to use their poor password creation abilities on every site they use.

This only leads to people using insecure passwords _everywhere_, rather than in one, local file, which is far less likely to be attacked.