I realize this is common in most browsers. I think it is a bug. A website should have no say in anything outside the content window. This is a security / privacy issue - I cannot see the URL to verify I am submitting information to the site I am expecting. This is an accessibility issue - I have bookmarklets and extensions that I use to modify styles to make sites more readable to me. This is a common sense issue - it is my browser and a website shouldn't be able to dictate what I can and cannot do.
At the very least, I should have an option to allow / disallow this behavior.
One browser I used to use (way back in the day) was K-Meleon which allowed the user to configure this behavior. Firefox used to allow the user to configure this behavior. IE & Chrome used to always display at least a read-only address bar as phishing protection.
I use Bitwarden as well - thank you for the reminder about the context menu feature.