I kinda get what you’re saying, but it’s not like I’m writing the password manager myself. The updates are automatic, and when it’s not updating the VM it’s hosted on has network restricted to everything but wireguard and for the bitwarden service. For me to get hacked, there would have to be a zero day exploits for my hypervisor, wireguard, and bitwarden all on the same day.

I understand what you’re getting at, but it’s not a publicly hosted service. It’s literally just for myself.