> But chances are this is not true (unless there is only one dev at lastpass which would also be admin of the webserver. This is an unknown, and we can argue u

> But chances are this is not true (unless there is only one dev at lastpass which would also be admin of the webserver. This is an unknown, and we can argue until we're both blue in the face about whether or not information about app A tells you information about app B, if produced by the same company, but you don't know if the same people within said company produced both apps. But I say that point doesn't really matter: Their quality controls are either lopsided or inadequate. Neither is a good outcome for a security company.