Absolutely agree - that's why I said "so the real difference is you've conveniently pre-loaded all your sensitive information in one go for the bad actor."
I’ll stick to passwords that are impossible to guess and an encrypted vault with multifactor authentication.