The key takeaway from this imo should be to only use password managers with a secret key like 1Password.