The goal of a password manager is to use random password, one generated for each website, so that if one is leaked... Well, nothing more !
So having autofill is a good feature.
Leaking one site could allow someone access into another site. For example, if I've integrated API keys from one site into another. It is those sorts of targets that hackers really look for.