Comment by TimTheTinker

1Password checks all these boxes and hasn't yet had a data breach.

Their biggest security hole is probably somewhere in the operational pipeline between 1P browser client developers and the static file servers hosting them.