KeepassXC can also be configured to allow / deny when a browser extension requests a password.