Most viruses now start off by scooping up all saved browser passwords automatically then sending them to a remote server. So if one of those ever goes off on your system you are at quite a risk. Especially since there are really good other options that aren’t vulnerable to that
This is my solution as well. It is worth remembering however that unlike paid services you are on the hook for your own backups. Not really a downside IMO, but something extra that needs to be done.