Ah, damn. Bitwarden has Agents.md. That doesn't really fill me with confidence, and it's the most critical software I use.
I need to update my threat model, I've trusted them quite a lot to the point of using Bitwarden for MFA for less-important services (so it's not really MFA, since both my password and MFA token is in Bitwarden, but it's super convenient), and only had Yubikey for my Bitwarden account, so as long as the app itself isn't compromised I should be good (and Bitwarden has a pretty good track record as far as I know), but if they are going to start vibe-coding their tools then it's probably time to move to a proper MFA.
One of the few use-cases I have for LLMs is when brainstorming mechanics and game design for GameJams.
I give it the theme and genres I want to go for, and ask for some unique and original ideas of what I should make.
And then make sure to avoid anything it suggests, because it's the most obvious and boring solution anyone could come up with.