Any time they spent is time they could have spent earning money instead. They may not have wanted to earn money with their free time, but did they want to set up a password manager with their free time either? It's not exactly a leisure activity for most users
I always find this a weird way to judge things. Are people actually spending the time they'd be earning money to set these kinds of things up?