or switching to some generic-sounding domain during login
Good password managers can match subdomains, substrings, "url starts with", etc. There is no excuse.