You will also find that password managers tend to relock their database after a period of time in order to limit the opportunity for an attack.

They have the option to, yes. They also have the option to basically never ask for reauthentication.

Files containing login credentials should be encrypted, yes.

Windows has encryption on by default. They are encrypted. They're decrypted when you log in.