I've been using keepass for years. If someone gets a hold of the vault file, the passphrase could potentially be found.

Unless you do selfhost correctly, yeah you want to trust somebody else.

"The cloud is just someone else's computer", so I guess if you trust bitwarden, that's cool. I hear that everything is encrypted before it's sent to their servers, but I prefer having everything done locally via KeePassXC.

Keepass is very good. Bitwarden just has a server side so it's easier to set up and use for multiple devices.