Ok but consider this:

Keepass requires to type a master log in, and is therefore a password I don't care to remember, and would add to my excel password sheet, defeating the purpose of keepass in the first place.

I don't think you understand the amount of apathy the average worker has for their company.

I use keepass at home, and set it to use a password and a key file because I actually care.

I genuinely don't care if someone hacks into my office account to do.... Whatever. Worst that can happen to me is getting sent to some on the clock cybersecurity awareness program where I'll be nodding off on my chair doing no work while an IT nerd rambles on about... Whatever it is they ramble about in these things, I never paid attention.

Exactly, massive IT failure. Unique passwords are required and should be used everywhere. Yet without a way to generate or access them, you end up with this dude, and I don’t blame them one bit!

Passkeys are actually better for situations like this. (And others, I’m just not a universal fan for every possible use case.)

They might allow the browser's built in manager. Good chance if they're a Microsoft shill, edge's built in would be better than nothing....although it's Microsoft so a text file might be better.

IT probably bans them because they can't access the data. Keepass files are some kind of container, you can store any file with in it. Great when you want save a txt doc with 2fa recovery codes or something and also not a bad way to send a payload that's impossible to scan. "I'm going on vacation, please use this keypass file for vendor XYZ, open the file within for the vendors contact info".

They don't allow custom software and I give 0 shits.

Cybersecurity isn't the big deal y'all making it out to be.