The fact that password managers can be implemented badly, doesn't mean we shouldn't implement them well.