Unless it is selfhosted
Discussion
Even that's not great, if you can access it remotely then someone else can too, software has bugs, etc.
I use keepass to store my passwords locally encrypted, and use syncthing to sync the DB across all relevant machines. No need for cloud anything.
Yes, but if one also uses 2fa like it is much harder