Since you chose to point it out: My reason is that I regularly need to be able to log into things on a non-personal machine, sometimes without access to my phone. So no, a password manager for all my accounts is out of the picture. I either write stuff down, remember it, or - sometimes - forget it and need to reset my password.
I’ve never had an issue with this before, and as of now, my filter is catching most of these mails, so in that sense it’s not too bad. Unless the topic of the phishing attempts suddenly changes completely, in which case I’ll have to start building the filter again…
Anyway: The scam they’re running is relatively specific (a specific banking-thing that pretty much everyone in my country uses, written in not-English, probably LLM generated). Do you know if there’s any way I could alert my email-provider about this? I can imagine it’s being sent to quite a few people, and should be relatively easy for someone higher up the chain, with more sophisticated tools, to filter out.