@schlink offline password managers present a harder target if the users are savvy in basic infosec.
Online managers run the risk of being the largest targets to go for.
https://www.pcworld.com/article/2936621/the-lastpass-security-breach-what-you-need-to-know-do-and-watch-out-for.html
@schlink At least Lastpass has good practices.