Plus presumably we are just waiting for the first widespread compromises of password managers. (Indeed, I'm amazed it hasn't already happened, except presumably the NSA, GCHQ, etc have done it and aren't letting us know about it).

I have a simple site-name-based permutation of my standard password for things I don't really care about too much.