Doesn't it depend on how widely and how many things an operator subscribes to?

I'm pretty invested in vault-secrets-operator and vault-config-operator.

Simply because of the amount of custom scripting I don't have to do.

But I have thought: I wonder if one operator could do the job.

Looking at vault, VSO and VCO codebases, you get a little daunted. There's a lot of code.