True, but in this case we are literally dealing with a company that claims they are really good at data security and it is the reason why the users are paying them.

It is one thing to outsource a monitoring solution. But outsourcing your SSO to a third party? They can only guarantee how well 1Password works, they cannot guarantee how well Okta works.