Normal
Both Proton Pass and Bitwarden are open source. But, Bitwarden has far more people watching the code like hawks and reporting any vulnerabilities sooner. Other password managers don't have as big of a following for code review so the risk is higher.