@lanodan If you are typing a password into a website, it better be because you typed the URL or loaded it from your own bookmark.
If you go back to the original article, it was about someone downloading a compromised version of KeePass from an invalid website (ironic in the context of a discussion of password managers). KeePass is what I use myself, but I don't tend to find their website through a Google ad before initiating the download.