I mean if the credentials are correct than they transaction is by design verified and trusted.

Some PW managers can store a passkey, but when tied to a device, if the device is compromised then all of your accounts are unless you're also using a yubikey or third device 2fa