I think there is a security risk when the password auto fills and there is a ‘show password’ on the website in question and when the permission is set to “view only, except password”. This would apply to over 50% of the web these days.
The above just makes the permission setting redundant
Just have an option like Dashlane that says ‘auto-sumbit’ and make it so it must be enabled if there is the ‘view only, except password’ permission set. Otherwise, refuse to fill in the password.