If your use-case aligns with what 1Password is selling, I'm sure they still make a great product.
If sharing's a huge part of what you're looking for, then 1Password or Bitwarden are probably your best options. If it's not and you're comfortable managing your own sync, then I don't think KeepassXC can be beat.
Pretty much the only thing I'll say concretely is Don't. Use. Lastpass. Like, if you've got the option of putting all your passwords in a plain text file on your desktop or in LastPass... pick the plain text file.
We are undergoing the same CASA audit (required to access Google Drive API). And we do have people forking and building the project from source, so one can hope they read what they compile. Strongbox' source code is half-closed (see #784 in their repo) so source-level independent audit is impossible.
Otherwise, no. A third-party audit costs like a year of part-time developer, and at this stage the developer is more useful.
It really is a tough choice.
Microsoft does have the best products for their and mobile platforms (including iOS,iPadOS) with really good Offline Features and so on.
But it still is Microsoft and Exchange behind...
A better product is Fastmail. But also US Servers and AUS company and a lot of downsides concerning offline usage and other privacy points.
What else? I try to avoid Google as much as I can....
Well there is Proton with it's Proton Suite getting better and better. There is german mailbox.org (worse 2FA) but overall a good privacy mail provider with own domains. There is migadu.com from Switzerland with EU Servers (rented at OVH Data Centers) and some other players like Tuta and others...
Especially the point about Fastmail really is a good point! You nailed it with your comment.
With JMAP in particular, they have been given huge potential with a huge feature set but have not implemented it (especially not in their own products).
Especially Offline Usage...
Fastmail does also have contacts within their portfolio and you can manage own (static) websites with their service. They do really have a great feature set.
They're the developers of JMAP (with great features for now and in future), they do have Masked Mails built-in and much more.
