That is rather concerning :/. I always said I'd never self host a PW manager, because if i lose access to it, I lose access to most parts of my life. But in light of this report, and with the BW servers being such a juicy target, i have taken to self hosting it. they probably won't notice a standalone server, with just one account on it, versus a server with thousands or millions of users in the BW servers.

ETA: with an appropriate backup strategy, it should be fine, i think?