That’s a lot of VRAM! What would be your dream build in that scenario?

unless the website also leaks the TOTP secret with the password

Do you have a source on the real world tests?

Why not? What did you move to?

But you still use the official BW client apps, correct?

Unless you forego usage of the clients and access Vaultwarden through the browser (removing accessibility and convenience especially on mobile), it is not an e2e replacement solution.

Are there any alternative FOSS clients/apps that work with Vaultwarden?

Edit: I see further down that the official client is open source, and would get forked in the event of any fuckery. So I’m sticking with Vaultwarden + Official client app approach for now.