> These examples are very different than your provider being hacked.

I am not GP. GP said:

> I say "no thanks, they're going to get hacked" and then six months later... they get hacked.

I interpreted that to mean "they (the passwords) were compromised" not necessarily "they (the password vault provider) were compromised".

> you should be isolating your passwords across the company so that one user doesn’t compromise every login, no?

Correct.