@tuxwise I took my time to reach the decision it went back and forth for a year, and the xz-utils thing eventually tilted things in favour of shipping as little code builtin as possible by default.
I do not believe however that there is a significant overlap between people who use Debian, keepaasxc, and people looking for a featureful password manager.
It just makes no sense to go with a local only password manager and then put gaping holes in it. @keepassxc