What is the biggest thing to maintain? Isn’t it just storing passwords?

Integration with browsers and websites, because these password managers are based on autofill rather than copying and pasting passwords.

Integration and endless QA with the websites for form-filling, and various tricky user flows with sync across desktop and mobile.