Many years ago, the "moat" for tools like 1Password was the decision to commit to a password manager workflow and capabilities in a particular platform/app for managing passwords. For me, I now question 1Passwords ability to assess risk, because this is obviously a decision where that didn't happen.
