That’s a quality idea 

I’m not surprised Whatsapp is there… Signal I am though  

The report also claims it’s reading passwords… so how secure is LastPass or BitWarden? 

I’m guessing, so long as they are closed to begin with they are ok since they require a password to open