to the title’s implication that such trust can be earned: it kinda can’t. That’s basically the point of really good passwords and secrets

Most people use and recommend encrypted password managers on remote servers. Which is fine, so long as the encryption is open source and audited and the company has a good and long positive reputation.

MS has none of these things.