In any other context I’d agree with you, but hacking is the one context where you really do want to do things the hard way. Use ephemeral VMs with passwords only saved in your head, have a dedicated machine for your illegal activities to help isolate your real identity from your hacking.

Honestly even if you’re just doing HackTheBox and similar best practice is to spin up a Kali VM and only use that VM for the activity since you’re literally connecting to a network with a bunch of hackers, even though what you’re doing is entirely above the board