Autofill grouping treats all *.nsw.gov.au sites as one organisation
I'm in Australia, where essentially every government service sits under a state-level suffix: service.nsw.gov.au, revenue.nsw.gov.au, myetoll.transport.nsw.gov.au, and hundreds of unrelated health, education and transport agencies. The same pattern applies to vic.gov.au, qld.gov.au, and so on.
With the default "Fill anywhere on this website" behaviour, 1Password appears to collapse these to a common base domain and suggests every credential I hold under nsw.gov.au on every one of those sites. On a toll-road login I was just offered a credential saved for a hospital system. These organisations have no relationship to each other whatsoever.
The relevant point: nsw.gov.au (and the other state suffixes) are listed on the Public Suffix List as effective TLDs. Grouping beneath them is equivalent to grouping everything under .com. If the matching logic is resolving to gov.au rather than honouring the more specific PSL entry, that looks like a bug rather than a design decision.
Two things would fix this for Australian users:
1. Honour the full PSL entry when determining the registrable domain, so service.nsw.gov.au and revenue.nsw.gov.au are treated as separate sites.
2. Failing that, allow "Only fill on this exact domain" to be set as a default, or applied to all items under a given domain. Currently it is per-item, per-URL-field, with no bulk or CLI option, which means correcting an imported vault is entirely manual.
