Researchers at ETH Zurich cracked the 'zero-knowledge' promises of Bitwarden, LastPass, and Dashlane — 27 working attacks against the vaults millions of people trust. The shift to passkeys is real, but the exit ramp is bumpier than Apple and Google want you to believe.