I also do not blindly autofill anything. In Bitwarden vernacular, that is called autofill on page load and even Bitwarden advises against it. Fortunately, there are a bunch of other autofill mechanisms that only trigger after the user demonstrates intent.
I was able to find peace with keyboard shortcuts as it minimizes the changes made to the web page, reducing data disclosure and maximizing reliability.
And for native apps (mostly remote desktop), where autofill is not yet available(it’s coming), I mostly use drag-and-drop to avoid the clipboard becuase the clipboard contents are visible to everything on your computer and if using something like Apple’s Universal Clipboard, everything on any of your devices.
Don’t know if this will affect your risk-analysis, but I figured that if you were unaware of the other options, at least we can benefit from “knowledge is power”.